prsr.chocoping.com/
172.66.40.178301 Moved Permanently 162 B IP 172.66.40.178:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET / HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 21 Feb 2023 00:09:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://prsr.chocoping.com/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cLhEoA78W882C4AOxEIpQ1nD%2FDIsPlNl1kBGYnix9q8QGKy8rzNYyrYTXWd1PClPFKQZLwb3T9SIAFFQrjMIeGcfAJ7oZp9iB47MVGXBMzLB%2FTWBTZU81VfDeXAAEcCH3qXwsA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79cb403cb996b512-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 97d7dde89cca188d19690d7bf759d034
7ec36525c8b5e8e278f0c5f26da3316687d89041
f8b500f9b1e8188807aab20f8e2540b5b2e888b13ff5f6f6211bbc28056f23e8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F8B500F9B1E8188807AAB20F8E2540B5B2E888B13FF5F6F6211BBC28056F23E8"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13011
Expires: Tue, 21 Feb 2023 03:45:53 GMT
Date: Tue, 21 Feb 2023 00:09:02 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 13d4983fb8a0ee2cb855663cc9d8f6a0
1f85fc46435f86d7f414e310670c9afe27ea9532
f4bc8150273c4fc6e90c9df8e074823a78dc8409bfcc00616265e24d7d663498
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4BC8150273C4FC6E90C9DF8E074823A78DC8409BFCC00616265E24D7D663498"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3093
Expires: Tue, 21 Feb 2023 01:00:35 GMT
Date: Tue, 21 Feb 2023 00:09:02 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 20 Feb 2023 23:38:04 GMT
content-type: application/json
age: 1858
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 3c926acb3daeb63b5374bdc352bbb679
167a2af5a3c8d1ec6d16c8f7ef1e063ce14ed481
e0bbf50d7d572d0b16ba4be51b190c4776777ecb572db9b25574b66d8e56ce36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0BBF50D7D572D0B16BA4BE51B190C4776777ECB572DB9B25574B66D8E56CE36"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19924
Expires: Tue, 21 Feb 2023 05:41:06 GMT
Date: Tue, 21 Feb 2023 00:09:02 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: VFhHmzfKy9uELXaTtQS/kLAxYCOnFGVlmj6KQvufl24WXoyzv1zG7Ue/wvjnvkOg7ljlycHeICY=
x-amz-request-id: EM314BH526RZG945
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
via: 1.1 google
date: Mon, 20 Feb 2023 23:52:32 GMT
age: 990
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
content-length: 5348
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 21 Feb 2023 00:09:02 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 5c798dc2ba834f832dafe77576a54ce6
465b380e56d5a2028ad8417e0b33b7d0aaba193f
d0816ca0ebd74e6be44148325e38e386522c0ffc7e13d72b04c0c8a63abb7876
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 21 Feb 2023 00:09:02 GMT
Server: ECS (amb/6B9E)
Content-Length: 278
prsr.chocoping.com/images/poweredby.png
172.66.43.78200 OK 4.0 kB URL HTTP/2 prsr.chocoping.com/images/poweredby.png
IP 172.66.43.78:0
File type PNG image data, 88 x 31, 8-bit/color RGB, non-interlaced\012- data
Hash 5b1ca9f747c1b73dfa1c508765d9056a
6b319c943d8c69e212e7de8385802891dbafe8a3
5b720d579bbc1f8fee3b64df9290d41a28c747a5802589e48e05b7ebbfe9fc2f
GET /images/poweredby.png HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prsr.chocoping.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 21 Feb 2023 00:09:03 GMT
content-type: image/png
content-length: 3956
last-modified: Tue, 17 Jun 2014 16:00:47 GMT
etag: "f74-4fc0a3f32a9c0"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l4iXU3a%2B9hxgN3kyJBkPKjONUmuxbm7Y7%2BQsKo8FjGi77qOaxYpFxJCVHR%2Fgs5vqKtVMNqJM66PGrA%2BC2oiyEJA6zcG1IUze0xqvHcKNzhyqBkKmP3S1RgKpr4zXhR66rk9VRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79cb404149f9b506-OSL
X-Firefox-Spdy: h2
prsr.chocoping.com/images/apache_pb.gif
172.66.43.78200 OK 2.3 kB URL HTTP/2 prsr.chocoping.com/images/apache_pb.gif
IP 172.66.43.78:0
File type GIF image data, version 89a, 259 x 32\012- data
Hash 48bc8b181b36c9289866a2e30f6afedd
7bcc5d916d33ab08929a9f7c1d07c33ac1ba47ba
1654416fec35a8b5d36ee0257025cec63e56dfe8572b6ff67c6b0d0d43158cbb
GET /images/apache_pb.gif HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prsr.chocoping.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 21 Feb 2023 00:09:03 GMT
content-type: image/gif
content-length: 2326
last-modified: Tue, 17 Jun 2014 16:00:47 GMT
etag: "916-4fc0a3f32a9c0"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hjUldKJogLisNWboQyNweCIAeAbgALKvYOWdW2GNEGI%2BklOlcW%2B1HPZz7Guk8cK9yR5RVz6mwmc%2FRT9lAC3S5aNq1NAkW1Kv5vNNbrB%2BH%2B%2Bvn3BGxciQJhfcfl%2BuIraaj2shgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79cb404149f7b506-OSL
X-Firefox-Spdy: h2
prsr.chocoping.com/noindex/css/open-sans.css
172.66.43.78200 OK 985 B URL HTTP/2 prsr.chocoping.com/noindex/css/open-sans.css
IP 172.66.43.78:0
Hash 5e21dbd1216719f590a92956e7bfe8c7
ad37ae75fe139ec64fa526a28217b255e6d8edab
b0d133c5ed3b301e582f79b9b591ca1447d6e04646df25e7b4047b945dc4883f
GET /noindex/css/open-sans.css HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prsr.chocoping.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 21 Feb 2023 00:09:03 GMT
content-type: text/css
last-modified: Tue, 17 Jun 2014 16:00:47 GMT
etag: W/"13d9-4fc0a3f32a9c0"
x-powered-by: PleskLin
cache-control: max-age=16070400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Acui8cRAB809cqifIvt3DHgfsj9TOe0x9qzNdx2rAMfud%2BCf%2BmGXQFyed5UQvG7DRrgfT%2BqKU7XKevHDz3Dyt0ZvJCEKsVSUkqZ7Bi%2F41%2FCepPtm1AJBSjOUi25U%2FsdQwY23oA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79cb404149f3b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash aea9630f88377d01e5cebab9de9c3b89
18c6603c6e63b79d45031e960dddd31b227f0de5
853e5bb59efe99054d86bbacf7c2f1f2483ad9c05d35cc9d8ea5dd9909cb38fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "853E5BB59EFE99054D86BBACF7C2F1F2483AD9C05D35CC9D8EA5DD9909CB38FB"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12123
Expires: Tue, 21 Feb 2023 03:31:06 GMT
Date: Tue, 21 Feb 2023 00:09:03 GMT
Connection: keep-alive
push.services.mozilla.com/
34.210.191.84101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.210.191.84:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: T7U3NA0GQHWvWErQ2lQDgA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8+XNmo9FUbCu38Jgp8bRjUfMbaw=
prsr.chocoping.com/noindex/css/fonts/Bold/OpenSans-Bold.woff
172.66.43.78404 Not Found 1.3 kB URL HTTP/2 prsr.chocoping.com/noindex/css/fonts/Bold/OpenSans-Bold.woff
IP 172.66.43.78:0
Hash 450f3fc179865b40c89659c246e34ef9
cca05048936e4f985d71c555a3b397436e626e90
c5826db8818066d2f2a1fda5b7ba5540b786f58e4016a67fadd271dcfc37d3e8
GET /noindex/css/fonts/Bold/OpenSans-Bold.woff HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://prsr.chocoping.com/noindex/css/open-sans.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Tue, 21 Feb 2023 00:09:03 GMT
content-type: text/html
last-modified: Tue, 15 May 2018 12:45:41 GMT
cache-control: max-age=16070400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wq0IyTu2S%2Bp350kzVtTIamSgrEEsq8TXJPugql5k9qXLNhOZgyHQYIA9CqmRTk4wItGSmImE807xdLN4A1jemRSujWCG5OGeidO56AM3t88pfg5oCBIl419C1YmRQWn18NCOKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79cb40429afdb506-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12612
Expires: Tue, 21 Feb 2023 03:39:16 GMT
Date: Tue, 21 Feb 2023 00:09:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12612
Expires: Tue, 21 Feb 2023 03:39:16 GMT
Date: Tue, 21 Feb 2023 00:09:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 3cb7960c629af2d4a5325cec8696f40b
eb04e882f528f56fc09206f741d490a4b091a6dd
df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12612
Expires: Tue, 21 Feb 2023 03:39:16 GMT
Date: Tue, 21 Feb 2023 00:09:04 GMT
Connection: keep-alive
prsr.chocoping.com/noindex/css/fonts/Light/OpenSans-Light.woff
172.66.43.78404 Not Found 1.3 kB URL HTTP/2 prsr.chocoping.com/noindex/css/fonts/Light/OpenSans-Light.woff
IP 172.66.43.78:0
Hash 450f3fc179865b40c89659c246e34ef9
cca05048936e4f985d71c555a3b397436e626e90
c5826db8818066d2f2a1fda5b7ba5540b786f58e4016a67fadd271dcfc37d3e8
GET /noindex/css/fonts/Light/OpenSans-Light.woff HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://prsr.chocoping.com/noindex/css/open-sans.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Tue, 21 Feb 2023 00:09:03 GMT
content-type: text/html
last-modified: Tue, 15 May 2018 12:45:41 GMT
cache-control: max-age=16070400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TnDZJ5lfJIaUOEHte82OwAk7rxCGcUa1NZayQ4qokeKqdXRdaGgHJQ2LXsK1R%2BOpCDOoNUbbYajE17FDj97bUPZbLQXbkRwubClbeHPOxp%2F0n3HBYPE6TRh2zvfijRlZ%2FwstSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79cb40429afcb506-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49b41834-fa39-4cbf-9bfc-6d30789ef886.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49b41834-fa39-4cbf-9bfc-6d30789ef886.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fd7e7448fcf5125b57131079d6c16fa8
6c1cd187631a8adb3524e2e8f510198dfbd5ed65
02e4189cb4d2ebce91f64af64efc8c2498bf36c66c45d5c8ed7e852085c5b38a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49b41834-fa39-4cbf-9bfc-6d30789ef886.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6040
x-amzn-requestid: 5db1ce9d-1839-4c2f-8645-eec503fffa6c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AkOOgHy3oAMF-1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f190c2-0be150165cb225fd1ea7dba0;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 03:00:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Posdm4nnVCU_57y_X5f9l3CSdt7CG6c57OVsKf4U6-NlspHj3v4h5w==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Feb 2023 22:13:11 GMT
age: 6953
etag: "6c1cd187631a8adb3524e2e8f510198dfbd5ed65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9c5a0bab7d34e51ee6476be179b356ba
87917d3cf520d73b7b1029f44505e7700413d51d
136e727a99409218318247b645558fad485ed84bcd90bd43a5895492cb317d89
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6879
x-amzn-requestid: 18c46562-f8d9-4f7f-8ea0-1bb46e206f80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ANnahEWgIAMFwYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e885dc-50a7cfe4693b4efb038ce1a7;Sampled=0
x-amzn-remapped-date: Sun, 12 Feb 2023 06:23:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qwK1XWOYMXy8qna9sVCV7q__QKMko9KXa8towbYhIj1EolPbqEuIHQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Feb 2023 15:01:26 GMT
age: 32858
etag: "87917d3cf520d73b7b1029f44505e7700413d51d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F062afd3d-1408-45f9-8a87-8676271020ec.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F062afd3d-1408-45f9-8a87-8676271020ec.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7f4f15374ec09bd3d657f2c8f0fa886c
fb01a0ee84a88cf6f8cacea78c5b9cd444a41a9c
a63f93c3413c34897706ede836bf8aaf186a7002a901df0dc5481d381af5b849
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F062afd3d-1408-45f9-8a87-8676271020ec.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7349
x-amzn-requestid: 76a8d55e-1e03-44d3-8c54-189007f4cf2f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AhffeElfIAMFWOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f0792f-30cb18357e326d222d1078b8;Sampled=0
x-amzn-remapped-date: Sat, 18 Feb 2023 07:07:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QKN2LPQ_CIFUcNABg2n9ncOJkiS4F_ywrTQj4-ug64rhwot5Boca8A==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Feb 2023 07:42:04 GMT
age: 59220
etag: "fb01a0ee84a88cf6f8cacea78c5b9cd444a41a9c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
prsr.chocoping.com/noindex/css/fonts/Light/OpenSans-Light.ttf
172.66.43.78404 Not Found 8.9 kB URL HTTP/2 prsr.chocoping.com/noindex/css/fonts/Light/OpenSans-Light.ttf
IP 172.66.43.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c565f8f22b4f89c8f5cc54c9f9ef5c56
f71d56754f77dee579f796a86e537d8cdf2bbb5f
7aa66e0313b7709997c383aa47286a0d74b2ca18bf93d4847428b259a5fc452f
GET /noindex/css/fonts/Light/OpenSans-Light.ttf HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prsr.chocoping.com/noindex/css/open-sans.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Tue, 21 Feb 2023 00:09:03 GMT
content-type: text/html
last-modified: Tue, 15 May 2018 12:45:41 GMT
cache-control: max-age=16070400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N%2Bjy5YFBsI3mn0%2BAjZOx5g%2F0Kq6d3Z82u7OhE9sRR%2FDyyojPoDFDlUAp3WVW1MeNbkA%2BhzdFwmjjAuQJgJD8481qzxB%2Bx7uxN%2FZ6srqZPixlfPXC4NL%2FVXVXwO0SoT9qKGFNJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79cb40435ba8b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
prsr.chocoping.com/noindex/css/fonts/Bold/OpenSans-Bold.ttf
172.66.43.78404 Not Found 6.5 kB URL HTTP/2 prsr.chocoping.com/noindex/css/fonts/Bold/OpenSans-Bold.ttf
IP 172.66.43.78:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f225140e10d7aa143bfe9441af07fefa
c24e0a85b487a342f5cb7a3b074d0116d9d4597c
d70769e71fd1bf6319fd17f2f866d9e0ea04112df3ff1222e9cf9b1133248cc7
GET /noindex/css/fonts/Bold/OpenSans-Bold.ttf HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prsr.chocoping.com/noindex/css/open-sans.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Tue, 21 Feb 2023 00:09:03 GMT
content-type: text/html
last-modified: Tue, 15 May 2018 12:45:41 GMT
cache-control: max-age=16070400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KZE8WqftS7tJFjz%2FzevWrOO6tyN7RRplS%2B6SAZwBsErqliU%2BUXSxRRX8XnekVj%2FOYw1IxzjvEk00IAWLNY0ESCIq2IEbn2jCHCzElpVQLvtTmUoIAqIGny4Tp%2BcDEGaLxyZOhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79cb40435ba9b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf1e2195-c852-4c89-889b-f430610b2b64.jpeg
34.120.237.76200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf1e2195-c852-4c89-889b-f430610b2b64.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8731ce65b0b488344705b96716fc85d6
eb4964fb506fa5be323d666243923744c31c8fdf
d0af8b820331858a0b1c68b4e011da8fe441327c0e369a4c2a30d8d011c89b8a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf1e2195-c852-4c89-889b-f430610b2b64.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4144
x-amzn-requestid: 1bdb8c7a-f0d7-4271-bd3b-2ec3b465f561
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Aj8-kEMGIAMF1dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f17529-1390788e6c72f3326441edd0;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 01:02:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xYXQG69Eb_xz2Zh5mGtCp1UxwCiSVblU0hwXeVYDLCOqWMx56T9V4Q==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Feb 2023 08:01:31 GMT
age: 58054
etag: "eb4964fb506fa5be323d666243923744c31c8fdf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cd4fbee-8eae-4308-9cc0-885fef5cbfc1.gif
34.120.237.76200 OK 46 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cd4fbee-8eae-4308-9cc0-885fef5cbfc1.gif
IP 34.120.237.76:0
File type GIF image data, version 89a, 296 x 148\012- data
Hash fe9decbee7c293c45a657f489964041f
04efd208a90c04eeea4920a04baabaff18624f89
031836ab1af10d8bcd644ad93e3eeab999efd7cc3b654f3f69b144656ba1598a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cd4fbee-8eae-4308-9cc0-885fef5cbfc1.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 45521
x-amzn-requestid: 333583bd-503b-4f9e-b39a-177b4666f1db
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Am1eFHEsoAMFtRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f29c59-0e0fb69b65b139c9289c5d85;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 22:02:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XnBYNViVxoy62eWGqQlJz-w6jV2L2zc4JzKHhxNpEbhFDZ3I6PJE7Q==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Feb 2023 22:45:55 GMT
age: 4996
etag: "04efd208a90c04eeea4920a04baabaff18624f89"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
prsr.chocoping.com/favicon.ico
172.66.43.78404 Not Found 0 B URL HTTP/2 prsr.chocoping.com/favicon.ico
IP 172.66.43.78:0
GET /favicon.ico HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prsr.chocoping.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Tue, 21 Feb 2023 00:09:03 GMT
content-type: text/html
last-modified: Tue, 15 May 2018 12:45:41 GMT
cache-control: max-age=16070400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nTvnaPWRlh1YQGfNeJ2qD1%2Be%2F0XhIjv2g1Mlc5gJztOMaQtp6w2od9J5MO%2FCh4NqwfT4Sn0nVi3ljYHqLuHCCd6xIkigAo1loplLUGs28noGQYE%2F63eBGmf6ii7iJEcLeHyTxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79cb40428af1b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
prsr.chocoping.com/
172.66.43.78403 Forbidden 0 B IP 172.66.43.78:0
GET / HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 403 Forbidden
date: Tue, 21 Feb 2023 00:09:02 GMT
content-type: text/html
last-modified: Thu, 16 Oct 2014 13:20:58 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=anRwkk%2F7uOm5Y6hEbQzsg2wPoK1qITCQGjL5imQG%2BtyV1UJ7taEn7CgnrYKa85ZqRIHg8m%2B4DmQzm8qTbSuY2rp9hYv5spvflvZJu0OtScatIzcxvCsWjbwTbz4KY453GGbDBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79cb40406934b506-OSL
content-encoding: br
X-Firefox-Spdy: h2
prsr.chocoping.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
172.66.43.78200 OK 0 B URL HTTP/2 prsr.chocoping.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP 172.66.43.78:0
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: prsr.chocoping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://prsr.chocoping.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 21 Feb 2023 00:09:02 GMT
content-type: application/javascript
last-modified: Wed, 15 Feb 2023 14:31:01 GMT
etag: W/"63ececa5-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J4bT0%2Fs%2FlvH1eLB8LXnxjWhxe0FbW%2FXZBHW4WAlYYx%2BYgL1N7%2Fn8VEC5Oml98giHF2B%2Bx8VkT9v2Ta0%2BtIFIIaHgmHWwLSUnOuaIExCkQ0NZCAEvzBN6iDdpW%2BFZtmCasp2S0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79cb404149fbb506-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 23 Feb 2023 00:09:02 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
engine.steelseriescdn.com/SteelSeriesGG32.1.0Setup.exe
104.18.203.4200 OK 0 B URL HTTP/1.1 engine.steelseriescdn.com/SteelSeriesGG32.1.0Setup.exe
IP 104.18.203.4:0
NIDS Severity Alert suricata high ET POLICY PE EXE or DLL Windows file download HTTP
GET /SteelSeriesGG32.1.0Setup.exe HTTP/1.1
Host: engine.steelseriescdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Tue, 21 Feb 2023 00:09:03 GMT
Content-Type: application/x-msdownload
Content-Length: 298924768
Connection: keep-alive
x-amz-id-2: 13wUImv2ZetKF5HAiWAGhmZRxAejel7lGSLmCJ09td9+3ePBjFO94NRJYT+JJUTLXPjOVDhM/Qk=
x-amz-request-id: C0M917SF5GD50JGD
Last-Modified: Mon, 20 Feb 2023 09:31:36 GMT
ETag: "32d619be6d39a1bad33f358f3e5f897c-36"
CF-Cache-Status: HIT
Age: 52421
Expires: Wed, 21 Feb 2024 00:09:03 GMT
Cache-Control: public, max-age=31536000
Accept-Ranges: bytes
Set-Cookie: __cf_bm=wcp4w1WNnBYW9scdUL89POvsdwdKfRIcnkQMFfxgb8M-1676938143-0-AS5prWe2PKDAC/SzbOQOxFPoU8U3OA2Agc4ouABBAlejw+Qy3+LJnd9VpuAO+FdzeZREulCJav0+w65hB7T+UCY=; path=/; expires=Tue, 21-Feb-23 00:39:03 GMT; domain=.steelseriescdn.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79cb40439cadfabc-OSL