Report - datepops2.website/go/fa54b833-c090-4d4a-be59-b92a8f3f29b9

Report Overview

Submitted URL
datepops2.website/go/fa54b833-c090-4d4a-be59-b92a8f3f29b9
IP
3.70.16.242
ASN
#16509 AMAZON-02
Submitted
2022-11-27 08:53:09
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
e1.o.lencr.org	6159	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	676 B	1.5 kB	23.36.76.226
bronzealliance.com	676232	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	529 B	1.9 kB	172.67.162.208
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
clickcanoe.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	16 kB	205 kB	49.12.98.92
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	54.149.51.98
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	64 kB	34.120.237.76
datepops2.website	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	388 B	1.3 kB	3.70.16.242
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.77.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-27	medium	datepops2.website/go/fa54b833-c090-4d4a-be59-b92a8f3f29b9	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda	358 B	2023-03-11	2023-03-11
Pretty URL clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda IP 49.12.98.92 ASN #24940 Hetzner Online GmbH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:16:34 Last Seen2023-03-11 21:16:34 Times Seen1 Hash e0ab89336ca4df03a72d0dcbc4588528 088993198be329379bcc43c72a6e1f5aec53f3b7 2cce031dd18380d01849872bf863e69f74779304d9f1190f0ec4f62ff1971471 Loading...

HTTP Transactions (48)

URL IP Response Size

datepops2.website/go/fa54b833-c090-4d4a-be59-b92a8f3f29b9

3.70.16.242

302 Found

268 B

URL HTTP/1.1
datepops2.website/go/fa54b833-c090-4d4a-be59-b92a8f3f29b9
IP
3.70.16.242:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with no line terminators
Size
268 B (268 bytes)
Hash
be5e39bfcbb5045f51d413062e6cedd3
4062a0d2e02e6116d224fbb209248b3a9350ccc7
3704ddcf82f461841877c6c496d093cfe06208a2493dd68b2cc36fbaa029edea

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /go/fa54b833-c090-4d4a-be59-b92a8f3f29b9 HTTP/1.1
Host: datepops2.website
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Server: openresty
Date: Sun, 27 Nov 2022 08:52:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 268
Connection: keep-alive
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
Access-Control-Allow-Origin: *
Location: https://bronzealliance.com/go/e493d46b-3dd6-4f62-8597-78f9102666dc?externalId=V7AuPq8vmzqPJBzVMrLVda&zoneid=
Set-Cookie: bemob-uniq-visit:fa54b833-c090-4d4a-be59-b92a8f3f29b9=1; Domain=datepops2.website; Path=/; Expires=Mon, 28 Nov 2022 08:52:57 GMT; HttpOnly
bemob-rotation:fa54b833-c090-4d4a-be59-b92a8f3f29b9:random:0aafcbfef25820b3deddfe57989354ca=0-0-17; Domain=datepops2.website; Path=/; Expires=Mon, 28 Nov 2022 08:52:57 GMT; HttpOnly
bemob-click-id=V7AuPq8vmzqPJBzVMrLVda; Domain=datepops2.website; Path=/; Expires=Mon, 28 Nov 2022 08:52:57 GMT; HttpOnly
Vary: Accept
X-Response-Time: 22.827ms
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4493
Expires: Sun, 27 Nov 2022 10:07:50 GMT
Date: Sun, 27 Nov 2022 08:52:57 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2199
Cache-Control: max-age=94490
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:57 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:07:47 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7585
Expires: Sun, 27 Nov 2022 10:59:22 GMT
Date: Sun, 27 Nov 2022 08:52:57 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 08:19:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2016
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: /rALfjTaAvESwbjGrv4hzURBQsEAxHO4dR9ot+3TaESRapCzQEukAjeAq1nn+gjR1qwIEUN1cw4=
x-amz-request-id: 9TYZQA29GDZVMZWB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 08:41:34 GMT
age: 683
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:57 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.36.76.226

200 OK

346 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
346 B (346 bytes)
Hash
55c73af316c20a18907a20611c2356d4
52251f7ce55806466930c5b60ea97cc0ec124758
ed3ba9ead20d461a0363417c7979a31d6cf6a92b7de168777a242161e686ac30

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "ED3BA9EAD20D461A0363417C7979A31D6CF6A92B7DE168777A242161E686AC30"
Last-Modified: Sat, 26 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21526
Expires: Sun, 27 Nov 2022 14:51:43 GMT
Date: Sun, 27 Nov 2022 08:52:57 GMT
Connection: keep-alive

e1.o.lencr.org/

23.36.76.226

200 OK

346 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
346 B (346 bytes)
Hash
55c73af316c20a18907a20611c2356d4
52251f7ce55806466930c5b60ea97cc0ec124758
ed3ba9ead20d461a0363417c7979a31d6cf6a92b7de168777a242161e686ac30

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "ED3BA9EAD20D461A0363417C7979A31D6CF6A92B7DE168777A242161E686AC30"
Last-Modified: Sat, 26 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21525
Expires: Sun, 27 Nov 2022 14:51:43 GMT
Date: Sun, 27 Nov 2022 08:52:58 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 08:08:54 GMT
cache-control: public,max-age=3600
age: 2644
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/01.jpeg

49.12.98.92

200 OK

12 kB

URL HTTP/2
clickcanoe.com/r/ad42/01.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
12 kB (11656 bytes)
Hash
08a4aee84ababa18dd0131c15dfe9cf1
7171a4f462de717feb648d8d29b65faec22a580c
91c7f5bb5a428d785f437f7e8ce291da9f8c174349ab8e5bf06813c6b9c1e4de

HTTP Headers

GET /r/ad42/01.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 11656
last-modified: Tue, 21 Jun 2022 09:16:27 GMT
etag: "2d88-5e1f1acdbb0c0"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/02.jpeg

49.12.98.92

200 OK

9.9 kB

URL HTTP/2
clickcanoe.com/r/ad42/02.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
9.9 kB (9941 bytes)
Hash
451ea84603192f314ba37957b76a91e3
182ad93a1cdcc555b98a6478f1efbbdb1b5f0c61
8f04e55cd7c8894bb749ac759cdb46a5ddf48888169fc9c4e16364f13939a92f

HTTP Headers

GET /r/ad42/02.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 9941
last-modified: Tue, 21 Jun 2022 09:17:23 GMT
etag: "26d5-5e1f1b0322ec0"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/03.jpeg

49.12.98.92

200 OK

13 kB

URL HTTP/2
clickcanoe.com/r/ad42/03.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
13 kB (12944 bytes)
Hash
b459b02ba104d712e5a20904ed771bf9
fcb243d05d66bfa23fb06062d1e3ed9f10260bb1
978eaa3784ea2bbb9830ce7bfbbda96843406f5bfd6b23af5b464493b9f4e327

HTTP Headers

GET /r/ad42/03.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 12944
last-modified: Tue, 21 Jun 2022 09:18:29 GMT
etag: "3290-5e1f1b4214340"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/04.jpeg

49.12.98.92

200 OK

8.3 kB

URL HTTP/2
clickcanoe.com/r/ad42/04.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
8.3 kB (8252 bytes)
Hash
afff6f2d6b6b28fc4607e1420b0225bc
0f95adbd8be15b9f936fffa40e27d08dc9b985fb
323687a1369b19a1d8b708e2b6a9ea3cf1e0693c28c11269bb1c3a616c19f6fe

HTTP Headers

GET /r/ad42/04.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 8252
last-modified: Tue, 21 Jun 2022 09:19:21 GMT
etag: "203c-5e1f1b73ab840"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/05.jpeg

49.12.98.92

200 OK

10 kB

URL HTTP/2
clickcanoe.com/r/ad42/05.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
10 kB (10343 bytes)
Hash
2173cc1db423aba3821bdc73e358f937
b0914fb97803de38fe9ecd252f1ea5b81144e3f9
97d8a30710cc49e140fd1f1bdfb13f2ffc9200338f0d3c97ca3c9f712337da33

HTTP Headers

GET /r/ad42/05.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 10343
last-modified: Tue, 21 Jun 2022 09:20:32 GMT
etag: "2867-5e1f1bb761800"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/06.jpeg

49.12.98.92

200 OK

8.4 kB

URL HTTP/2
clickcanoe.com/r/ad42/06.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
8.4 kB (8441 bytes)
Hash
9c910f8ea75c3194c208811473784142
fde85bd0b834685ab5293e4f6d2eb47f59a80d13
de5389165d1523f343c72127bc3ffc4233de91d7321d40cffc4097b26a814ec5

HTTP Headers

GET /r/ad42/06.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 8441
last-modified: Tue, 21 Jun 2022 09:21:06 GMT
etag: "20f9-5e1f1bd7ce480"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/07.jpeg

49.12.98.92

200 OK

7.6 kB

URL HTTP/2
clickcanoe.com/r/ad42/07.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
7.6 kB (7602 bytes)
Hash
b707c4760b4c6ef7d44a4cda6a4664d9
5cd88e608cd892bd3941687fea21adfe621b4212
3388f40acdf3555de984e4053117d2e9adbfc990d2f59d97eea34a3c8ad592ab

HTTP Headers

GET /r/ad42/07.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 7602
last-modified: Tue, 21 Jun 2022 09:21:33 GMT
etag: "1db2-5e1f1bf18e140"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/08.jpeg

49.12.98.92

200 OK

7.7 kB

URL HTTP/2
clickcanoe.com/r/ad42/08.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
7.7 kB (7674 bytes)
Hash
d97af0212528e136b93652f435829257
7ac17e7cf0548ec67767f82d5c73460e98e1c41a
7694f23068ef9b2cf8b841cbe05a41821e19473a5dd44434e5d1b57fc372d6eb

HTTP Headers

GET /r/ad42/08.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 7674
last-modified: Tue, 21 Jun 2022 09:22:04 GMT
etag: "1dfa-5e1f1c0f1e700"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/09.jpeg

49.12.98.92

200 OK

6.1 kB

URL HTTP/2
clickcanoe.com/r/ad42/09.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
6.1 kB (6109 bytes)
Hash
b17a997eb07c8b5494846a709a6c3026
90b1da96089c9d4a41f7614013ee46f97fc2f7eb
5ea24101a2ad3a3d79a52fdd1866e4d048aacc240f73c20855fe7b28b307f200

HTTP Headers

GET /r/ad42/09.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 6109
last-modified: Tue, 21 Jun 2022 09:32:18 GMT
etag: "17dd-5e1f1e58acc80"
accept-ranges: bytes
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4074
Cache-Control: max-age=91307
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 08:52:58 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:14:45 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

clickcanoe.com/r/ad42/10.jpeg

49.12.98.92

200 OK

12 kB

URL HTTP/2
clickcanoe.com/r/ad42/10.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
12 kB (12148 bytes)
Hash
d1efe7e566e851142f9e245c1241867a
7718e91255466e20e1d6d71666fb070b77ff8abb
bc16d86f2f6cd5c943a2f0bad963532724833a43cbbd968f2caadb752d6487ae

HTTP Headers

GET /r/ad42/10.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 12148
last-modified: Tue, 21 Jun 2022 09:22:47 GMT
etag: "2f74-5e1f1c38207c0"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/11.jpeg

49.12.98.92

200 OK

8.1 kB

URL HTTP/2
clickcanoe.com/r/ad42/11.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
8.1 kB (8102 bytes)
Hash
af70d82d339c35dabfc5be6e9e808dd8
93424a87691fefdbe38fda4d0283d52294d0330a
f2950d533fae620b858ff9c25d5e802b8e52ad7c1e6e624f3cd452a733c951d4

HTTP Headers

GET /r/ad42/11.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 8102
last-modified: Tue, 21 Jun 2022 09:23:22 GMT
etag: "1fa6-5e1f1c5981680"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/13.jpeg

49.12.98.92

200 OK

8.2 kB

URL HTTP/2
clickcanoe.com/r/ad42/13.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
8.2 kB (8197 bytes)
Hash
2444f17819e6e655d10b304fdc9369e6
db6f7a6197de8d370246ccbb38d791e4014656a8
c3653c6d293f1418abb7a0009069ae2598526321c14f2fee4bdc20199ffd4146

HTTP Headers

GET /r/ad42/13.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 8197
last-modified: Tue, 21 Jun 2022 09:24:24 GMT
etag: "2005-5e1f1c94a2200"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/12.jpeg

49.12.98.92

200 OK

8.4 kB

URL HTTP/2
clickcanoe.com/r/ad42/12.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
8.4 kB (8354 bytes)
Hash
d5c06a40970d801d941e5bfa2c90db72
4551f6a7351db2f7efe27cfaf80abaa381f2b417
6e8ddb9b4b35017cc493e8a852de5858e76e8f68116bbfff86c27adbb87b8760

HTTP Headers

GET /r/ad42/12.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 8354
last-modified: Tue, 21 Jun 2022 09:23:47 GMT
etag: "20a2-5e1f1c7158ec0"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/14.jpeg

49.12.98.92

200 OK

9.9 kB

URL HTTP/2
clickcanoe.com/r/ad42/14.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
9.9 kB (9875 bytes)
Hash
2bd6e968d62a7f6839248d905d33d8e5
05fdef212e417c2255a1cddc1885426990c3b581
f15a506621e9d9c3d9c2866e203d77f8f9844c6510fde8549d52e9cc13d838b1

HTTP Headers

GET /r/ad42/14.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 9875
last-modified: Tue, 21 Jun 2022 09:25:04 GMT
etag: "2693-5e1f1cbac7c00"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/15.jpeg

49.12.98.92

200 OK

11 kB

URL HTTP/2
clickcanoe.com/r/ad42/15.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
11 kB (11332 bytes)
Hash
c813d3d0bebf4adab98c44d4cca21afe
7f65fe153adc64bbeb4512ef9274455808dbc957
efc25630fbefd642a93cb2674e00df554b9f85572c9afb8682fccc2ea97bfb63

HTTP Headers

GET /r/ad42/15.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 11332
last-modified: Tue, 21 Jun 2022 09:25:36 GMT
etag: "2c44-5e1f1cd94c400"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/17.jpeg

49.12.98.92

200 OK

10 kB

URL HTTP/2
clickcanoe.com/r/ad42/17.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
10 kB (10452 bytes)
Hash
fe5150ec2b1de9fb9016968d83b80025
7c32d0e63f001c2afb83dd153a6cb2e928533f5c
6f1b6972640100606762527cd8a6db899284d589320b2d4761fa20a729d48378

HTTP Headers

GET /r/ad42/17.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 10452
last-modified: Tue, 21 Jun 2022 09:26:39 GMT
etag: "28d4-5e1f1d15611c0"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/16.jpeg

49.12.98.92

200 OK

11 kB

URL HTTP/2
clickcanoe.com/r/ad42/16.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
11 kB (11419 bytes)
Hash
03ce0623a8ce36a08de398db29064f33
b86c1dc08f44213c1e2f93e0541ec939d3287d24
e08e325a539ae031d7f3b71dae8ebea12ecfaf043e1e944542c0aa9b6bfddce5

HTTP Headers

GET /r/ad42/16.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 11419
last-modified: Tue, 21 Jun 2022 09:26:03 GMT
etag: "2c9b-5e1f1cf30c0c0"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/18.jpeg

49.12.98.92

200 OK

12 kB

URL HTTP/2
clickcanoe.com/r/ad42/18.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
12 kB (11954 bytes)
Hash
bfe0d0d63f7b9d85e8a41b62abe7c141
76802c39d1ffa8663a7a1da2329d60fb6a4bfa53
cecab59e491d546ff97b07fa63e564137c9f514072f9a04c966adf2595a17f03

HTTP Headers

GET /r/ad42/18.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 11954
last-modified: Tue, 21 Jun 2022 09:27:17 GMT
etag: "2eb2-5e1f1d399e740"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/20.jpeg

49.12.98.92

200 OK

12 kB

URL HTTP/2
clickcanoe.com/r/ad42/20.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
12 kB (11691 bytes)
Hash
7297aefdab4e18f55c85105bbccd0d65
1d7fd9167384cf54e54ae716619830280d2a64ef
0c64eb37ffdb1607475dbbcba410b5bd53441962685d76749cecd3bfc40e6388

HTTP Headers

GET /r/ad42/20.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 11691
last-modified: Tue, 21 Jun 2022 09:28:25 GMT
etag: "2dab-5e1f1d7a78040"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/19.jpeg

49.12.98.92

200 OK

9.5 kB

URL HTTP/2
clickcanoe.com/r/ad42/19.jpeg
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size
9.5 kB (9517 bytes)
Hash
839dd53bb80ea358911a0c21cb64123d
56465ca711fc5add8a3dfdc6997a4815375ec833
d87a273b1e0123f90e3e00a77fe293f42eead1cfb6f28c27daa1e3f9acd6343b

HTTP Headers

GET /r/ad42/19.jpeg HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/jpeg
content-length: 9517
last-modified: Tue, 21 Jun 2022 09:27:51 GMT
etag: "252d-5e1f1d5a0b3c0"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/play.png

49.12.98.92

200 OK

2.2 kB

URL HTTP/2
clickcanoe.com/r/ad42/play.png
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 60 x 60, 8-bit colormap, non-interlaced\012- data
Size
2.2 kB (2164 bytes)
Hash
0efb85890619b47119f3adc989dd89fa
1b6b7b64454fb94211d70dbe4198d5929cd1d263
27bbd8d374cc746b7892fa5c286b67efc5b891d91c2afb24b8ef8139da2be99a

HTTP Headers

GET /r/ad42/play.png HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/index.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/png
content-length: 2164
last-modified: Sun, 07 Feb 2021 15:30:14 GMT
etag: "874-5bac0bacc6d80"
accept-ranges: bytes
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/favicon.png

49.12.98.92

200 OK

1.5 kB

URL HTTP/2
clickcanoe.com/r/ad42/favicon.png
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size
1.5 kB (1469 bytes)
Hash
0a37e4932bfab6d60e11fd84c1ed0136
9fd5e9d2dc15d63004207bb74dfef57f28ba5b98
97e37ae62ff1c9058b798255ba8e99988d49da7b98c7710e234aab6c3104f7f0

HTTP Headers

GET /r/ad42/favicon.png HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: image/png
content-length: 1469
last-modified: Sun, 07 Feb 2021 15:30:14 GMT
etag: "5bd-5bac0bacc6d80"
accept-ranges: bytes
X-Firefox-Spdy: h2

push.services.mozilla.com/

54.149.51.98

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.149.51.98:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IP2TWBvyCzjoa7+wq+F0og==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2mbLc3nh9g2jYbcLba8DBEFhF3g=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7946
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 08:52:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7946
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 08:52:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7946
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 08:52:59 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7946
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 08:52:59 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg

34.120.237.76

200 OK

7.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.4 kB (7380 bytes)
Hash
76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:50:08 GMT
age: 39771
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a2bb7d-e57c-4751-a56f-0802ae9eaee6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9063 bytes)
Hash
e615cdc2e330b5cf76435abce9aa631a
71f737c3cee7766494157cd6491ce247a785c09e
853f68bf79a553b9fbf0e10391424faf0a3c071370d05d369563f7824d1bda84

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a2bb7d-e57c-4751-a56f-0802ae9eaee6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9063
x-amzn-requestid: f00ac8bd-6466-4c92-9b99-0e71b4b2345c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8Jr4ENtoAMFzvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b2318-0e3a57932987e29521388dd7;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:04:56 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ntfumip5IjOlyoe6ASlwJ1PjPLN1yZHkK_iiDDKfmMCyI__PrrGVMA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 82893cc36087a50f9a150a621d10e740.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 11:33:57 GMT
age: 76742
etag: "71f737c3cee7766494157cd6491ce247a785c09e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe38fd9-0497-4ec8-8f57-1ba100e73fcc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.9 kB (6859 bytes)
Hash
f80a9a9b55da31c98663e157dde74a19
26b8dd82140c0db021048e11bff65a391dc6b444
680c39e4ea1d784db9831958942a64f3e83618dc443c8bcaa34223d85bb5b926

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe38fd9-0497-4ec8-8f57-1ba100e73fcc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6859
x-amzn-requestid: 4a1b13ad-9455-401d-a914-c1ada2191977
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYTHRroAMFR8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-4e5d630b23cdeb2e4b6d75d1;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: D24B6xoLZ2nu1NdlMU5TgJSc-DfzD6vrMzgU3s6tAiAsUuzBb_t89Q==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 08:21:28 GMT
age: 1891
etag: "26b8dd82140c0db021048e11bff65a391dc6b444"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10199 bytes)
Hash
2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 39678
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.8 kB (4803 bytes)
Hash
cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:37 GMT
age: 39682
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (13049 bytes)
Hash
1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MA_O50Lu6RRAFJpzXmVXhkxvYazdX5Lhk2Qa5k9fYUhBta-IWpVT1g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 01:46:48 GMT
age: 25571
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6188ef1b-7a47-4903-9867-0e57b53def62.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.1 kB (5103 bytes)
Hash
116eb5028a206e55f758f3e34887c87e
10577d9fc19028a0e0303634ec16ad8b2d41fa7a
d5d0f5518f8346e78f00a57632efe36f3363cabfa9abb30b7bea60261b29910b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6188ef1b-7a47-4903-9867-0e57b53def62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 5103
x-amzn-requestid: 203eadee-9375-4290-ae0a-dd48e83df697
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFGzTE90oAMFTyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637eb814-2c32253b155d5dd0283fdd07;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 00:17:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NQEJS9-L2M6WJ5nqH7C7MqIv96GDNUexqw60hbX_3z8wxv8bp0ARwQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 17:52:17 GMT
age: 54049
etag: "10577d9fc19028a0e0303634ec16ad8b2d41fa7a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

bronzealliance.com/go/e493d46b-3dd6-4f62-8597-78f9102666dc?externalId=V7AuPq8vmzqPJBzVMrLVda&zoneid=

172.67.162.208

302 Found

0 B

URL HTTP/2
bronzealliance.com/go/e493d46b-3dd6-4f62-8597-78f9102666dc?externalId=V7AuPq8vmzqPJBzVMrLVda&zoneid=
IP
172.67.162.208:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /go/e493d46b-3dd6-4f62-8597-78f9102666dc?externalId=V7AuPq8vmzqPJBzVMrLVda&zoneid= HTTP/1.1
Host: bronzealliance.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
date: Sun, 27 Nov 2022 08:52:57 GMT
content-type: text/html; charset=utf-8
location: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
access-control-allow-origin: *
set-cookie: bemob-uniq-visit:e493d46b-3dd6-4f62-8597-78f9102666dc=1; Domain=bronzealliance.com; Path=/; Expires=Mon, 28 Nov 2022 08:52:57 GMT; HttpOnly
bemob-rotation:e493d46b-3dd6-4f62-8597-78f9102666dc:random:3e60b2c57c6d2c7064a4a4f2565b1221=0-0-0; Domain=bronzealliance.com; Path=/; Expires=Mon, 28 Nov 2022 08:52:57 GMT; HttpOnly
bemob-track-url=https%3A%2F%2Fclickcanoe.com%2Fr%2Fad42%2Fi_us_wl_back_bronze.php%3Fkey%3DeyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%253D%253D%26bemobdata%3Dc%253De493d46b-3dd6-4f62-8597-78f9102666dc..l%253D0410d953-a292-454f-a167-4637ba08b4ee..a%253D0..b%253D1..e%253DV7AuPq8vmzqPJBzVMrLVda; Domain=bronzealliance.com; Path=/; Expires=Mon, 28 Nov 2022 08:52:57 GMT; HttpOnly
vary: Accept
x-response-time: 9.312ms
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sEAA96C1wpky%2B8QFhLkD5vASn7czkrziOXUUM2SI9Ki5kvUcXv27H0i4fb8uj2o2KebYP1vaQ%2Bw5oy0%2FGbTq9JjJla8XwLEuExjxrhL2HEAHNYWxhM4ATehNtJnz0PUsMh1pz4o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709a175ef9ab4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda

49.12.98.92

200 OK

0 B

URL HTTP/2
clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2

clickcanoe.com/r/ad42/index.css

49.12.98.92

200 OK

0 B

URL HTTP/2
clickcanoe.com/r/ad42/index.css
IP
49.12.98.92:0
ASN
#24940 Hetzner Online GmbH

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /r/ad42/index.css HTTP/1.1
Host: clickcanoe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://clickcanoe.com/r/ad42/i_us_wl_back_bronze.php?key=eyJ0aW1lc3RhbXAiOiIxNjY5NTM5MTc3IiwiaGFzaCI6ImJmMThiZjllNGU4NjVlODI3NDA4ODRlM2E3YzIxNjM2NTEyNmIyODgifQ%3D%3D&bemobdata=c%3De493d46b-3dd6-4f62-8597-78f9102666dc..l%3D0410d953-a292-454f-a167-4637ba08b4ee..a%3D0..b%3D1..e%3DV7AuPq8vmzqPJBzVMrLVda
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 08:52:58 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Sun, 07 Feb 2021 15:30:14 GMT
etag: W/"415-5bac0bacc6d80"
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (48)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type