firefox.settings.services.mozilla.com/v1/
54.230.111.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 54.230.111.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 14:47:16 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7IWBwbH1phwizNMmXzmq3Y9-h73lGMZyiZAbBYrxlMyrdITtMR8CqA==
Age: 3580
mail.estartupchallenge-egabon.org/web/Jorange/orange/b84ce283504a9af/login.php
108.179.242.163302 Found 250 B URL HTTP/1.1 mail.estartupchallenge-egabon.org/web/Jorange/orange/b84ce283504a9af/login.php
IP 108.179.242.163:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 33a1814876af328cb30bbb2ec1ffa9a5
7b2b108d5e3c910900f62daaf42811f6c55af315
bc324bdc6feda4c6cb7c582d5a5e7d66f257ae49d63cefeda032b181ecc393d4
Analyzer Verdict Alert openphish Orange
fortinet Phishing
GET /web/Jorange/orange/b84ce283504a9af/login.php HTTP/1.1
Host: mail.estartupchallenge-egabon.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 05 Oct 2022 15:46:56 GMT
Server: Apache
Location: http://mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi
Content-Length: 250
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5278
Expires: Wed, 05 Oct 2022 17:14:54 GMT
Date: Wed, 05 Oct 2022 15:46:56 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
54.230.111.14200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 54.230.111.14:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 05 Oct 2022 04:02:33 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VDI8qvHF0enWw7Mc7uokRV0u2o4Y3UahuBeel6tOtpxxlia4ZL-l2A==
age: 42264
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 05 Oct 2022 15:46:56 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi
108.179.242.163200 OK 392 B URL HTTP/1.1 mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi
IP 108.179.242.163:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash df660086f6dc7b6b6e74c56844d24fc6
3d83164a92d54514194aff1459eea7825d8126f0
dfbd0494812a21aeb74a252bc5eb9e69301596fdf40f17615f7278195b7be774
Analyzer Verdict Alert fortinet Phishing
GET /cgi-sys/suspendedpage.cgi HTTP/1.1
Host: mail.estartupchallenge-egabon.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 15:46:56 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 392
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html
mail.estartupchallenge-egabon.org/favicon.ico
108.179.242.163302 Found 250 B URL HTTP/1.1 mail.estartupchallenge-egabon.org/favicon.ico
IP 108.179.242.163:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 33a1814876af328cb30bbb2ec1ffa9a5
7b2b108d5e3c910900f62daaf42811f6c55af315
bc324bdc6feda4c6cb7c582d5a5e7d66f257ae49d63cefeda032b181ecc393d4
GET /favicon.ico HTTP/1.1
Host: mail.estartupchallenge-egabon.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi
HTTP/1.1 302 Found
Date: Wed, 05 Oct 2022 15:46:56 GMT
Server: Apache
Location: http://mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi
Content-Length: 250
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
54.230.111.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 54.230.111.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Wed, 05 Oct 2022 15:30:28 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 05 Oct 2022 15:46:42 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jMF9-4aI23ZzLuBx1cQcNaDLcTtDi6qbRIvPI7ffjtyvGj71ikoafQ==
Age: 1044
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 840
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 05 Oct 2022 15:46:57 GMT
Last-Modified: Wed, 05 Oct 2022 15:32:57 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
iyfhshsp.com/?dn=referer_detect&pid=5POL4F2O4
208.91.196.46200 OK 1.8 kB URL HTTP/1.1 iyfhshsp.com/?dn=referer_detect&pid=5POL4F2O4
IP 208.91.196.46:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (575), with CRLF line terminators
Hash f6f1c1bedb7eee5aea71c119050ad8cc
9d5de1e95b83bb1ecbeefb733dcce8fb6e3a4d73
f99c60060b4ccca9b75e707ec2c955284ddea6b27d73a971f25fe6e55a0ed7a9
GET /?dn=referer_detect&pid=5POL4F2O4 HTTP/1.1
Host: iyfhshsp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mail.estartupchallenge-egabon.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 15:46:56 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_WpulUAqcVWUaDvZ1+EgRDHt+qRWt+w9C7vya6JdVgGdd30M2Tvd0d3VXw34Y2EigR7qrycG+wTP/zRjMio8vhw==
Cteonnt-Length: 3844
Keep-Alive: timeout=5, max=124
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Cache-Control: private
Content-Encoding: gzip
Content-Length: 1805
push.services.mozilla.com/
54.189.157.130101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.189.157.130:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: EwtlfGflucRCa3Dxx3+4Wg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mhJfguj9oEtqKZu4aTSCArP0J0w=
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221664984799761%22
54.230.111.35200 OK 4.7 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221664984799761%22
IP 54.230.111.35:0
File type JSON data\012- , ASCII text, with very long lines (22383), with no line terminators
Hash 81c72ff8bef537915664f815ecdb46e5
fb8eafd897ddac5207114b17bf9b7bc576618c63
1b083c0f5f05fdf8cf8434beeceae4a16fdf4647551e86e7f9328271415d7251
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221664984799761%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600, max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:46:57 GMT
Expires: Wed, 05 Oct 2022 16:46:57 GMT
Last-Modified: Wed, 05 Oct 2022 15:46:39 GMT
X-Content-Type-Options: nosniff
Content-Encoding: br
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -ToMITNpQGHwN10R1rde8auISXfvoOOacWgwcjnioUGh7JRrISR03w==
i4.cdn-image.com/__media__/js/min.js?v2.3
23.36.76.113200 OK 3.1 kB URL HTTP/1.1 i4.cdn-image.com/__media__/js/min.js?v2.3
IP 23.36.76.113:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (8349), with CRLF line terminators
Hash 683b827c961eb1a55ae52a5c42524a13
a1c0b96af389b99124cb42f1730d2dcb0f3dc3f4
58e12a35c892e412e904c69e12d13915c07afb320633925f41a493ebfc2ee053
GET /__media__/js/min.js?v2.3 HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/javascript
Last-Modified: Wed, 22 Sep 2021 05:16:08 GMT
ETag: "614abc18-20f3"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: public, max-age=72428
Expires: Thu, 06 Oct 2022 11:54:06 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Content-Length: 3050
Connection: keep-alive
iyfhshsp.com/px.js?ch=2
208.91.196.46200 OK 346 B IP 208.91.196.46:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type ASCII text, with very long lines (346), with no line terminators
Hash f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
GET /px.js?ch=2 HTTP/1.1
Host: iyfhshsp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://iyfhshsp.com/?domain=estartupchallenge-egabon.org&dn=estartupchallenge-egabon.org&fp=H%2BdnNeO%2FG2LrPMjae5IGJGunr4wNnt5lZwx4vKik%2BIhA5tfLgTh1rE1qozDmaJbsAoYldw6y9%2FmC241tEEZzg%2B%2BJ52aEIY4%2BlQQrrm43ZOgVikB9DnG%2F%2BhRN6tOTsd0mar6aMitgyNAYxauenpmZPJ69t2DeRR07m63l9pllo5JygZ9z4vr%2BSwGz5DxJD%2BC8&prvtof=a4%2Bi8OBXVFZGEVdv78EJyV9I5bzR%2B4nU73dbsE6gEUp2HmowFqgLGRK6XUqpwyS0SBlJu6eLN6mZaNHHmagLTw%3D%3D&poru=WsPP%2FRC5s%2F0eq4H6GXxfeXtuU6nz1X9YQ1cJ1nnrLYPWllLEOD8X%2F7vKfQESIu6y%2FzTWfVGMz8KGXMn3g4CYH6yuZ8zBljAVRL6Kg8HD7n0%3D&
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 15:46:58 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=124
Connection: Keep-Alive
Content-Type: application/javascript
iyfhshsp.com/px.js?ch=1
208.91.196.46200 OK 346 B IP 208.91.196.46:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type ASCII text, with very long lines (346), with no line terminators
Hash f84f931c0dd37448e03f0dabf4e4ca9f
9c2c50edcf576453ccc07bf65668bd23c76e8663
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584
GET /px.js?ch=1 HTTP/1.1
Host: iyfhshsp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://iyfhshsp.com/?domain=estartupchallenge-egabon.org&dn=estartupchallenge-egabon.org&fp=H%2BdnNeO%2FG2LrPMjae5IGJGunr4wNnt5lZwx4vKik%2BIhA5tfLgTh1rE1qozDmaJbsAoYldw6y9%2FmC241tEEZzg%2B%2BJ52aEIY4%2BlQQrrm43ZOgVikB9DnG%2F%2BhRN6tOTsd0mar6aMitgyNAYxauenpmZPJ69t2DeRR07m63l9pllo5JygZ9z4vr%2BSwGz5DxJD%2BC8&prvtof=a4%2Bi8OBXVFZGEVdv78EJyV9I5bzR%2B4nU73dbsE6gEUp2HmowFqgLGRK6XUqpwyS0SBlJu6eLN6mZaNHHmagLTw%3D%3D&poru=WsPP%2FRC5s%2F0eq4H6GXxfeXtuU6nz1X9YQ1cJ1nnrLYPWllLEOD8X%2F7vKfQESIu6y%2FzTWfVGMz8KGXMn3g4CYH6yuZ8zBljAVRL6Kg8HD7n0%3D&
Connection: keep-alive
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 15:46:58 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=(self https://dts.gnpge.com), ch-ua-model=(self https://dts.gnpge.com)
Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT
ETag: "15a-5b952a63b81f1"
Accept-Ranges: bytes
Content-Length: 346
Keep-Alive: timeout=5, max=127
Connection: Keep-Alive
Content-Type: application/javascript
i4.cdn-image.com/__media__/pics/12471/bodybg.png
23.36.76.113200 OK 97 kB URL HTTP/1.1 i4.cdn-image.com/__media__/pics/12471/bodybg.png
IP 23.36.76.113:0
ASN #20940 Akamai International B.V.
File type PNG image data, 1637 x 921, 8-bit/color RGB, non-interlaced\012- data
Hash 5082ce2ca4166a85ac3651bc34ec3ec8
5069950a6df2fcc07a2318a8459e282f93e45fae
e5c767653898a8e9acb1e966aca9d01f39a45609557d1a4811ad26cd48234a1f
GET /__media__/pics/12471/bodybg.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 97189
Last-Modified: Wed, 20 Jan 2021 10:46:07 GMT
ETag: "600809ef-17ba5"
Accept-Ranges: bytes
Cache-Control: public, max-age=40815
Expires: Thu, 06 Oct 2022 03:07:13 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
i4.cdn-image.com/__media__/pics/12471/logo.png
23.36.76.113200 OK 4.0 kB URL HTTP/1.1 i4.cdn-image.com/__media__/pics/12471/logo.png
IP 23.36.76.113:0
ASN #20940 Akamai International B.V.
File type PNG image data, 52 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c98595145e8a8f5a7b6d4f88dceea6a
ee14b50f3332d03e4557c14449deec1fa13ba773
b690a0cc0ad3a4899a5e6c52e4a5c7ca6c2f334f946c72b2aafecb316d83b932
GET /__media__/pics/12471/logo.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 3956
Last-Modified: Wed, 20 Jan 2021 10:46:07 GMT
ETag: "600809ef-f74"
Accept-Ranges: bytes
Cache-Control: public, max-age=40815
Expires: Thu, 06 Oct 2022 03:07:13 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
i4.cdn-image.com/__media__/pics/12471/search-icon.png
23.36.76.113200 OK 1.2 kB URL HTTP/1.1 i4.cdn-image.com/__media__/pics/12471/search-icon.png
IP 23.36.76.113:0
ASN #20940 Akamai International B.V.
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 750928ec52c1b77aa2e72d76895d3a96
69465013bc2d4766abfc566eeb2fb5b21ef20e8f
cf2e997ed10db7eef3394c65ec68720fce20c858bf202a8c83328b7c1586d87d
GET /__media__/pics/12471/search-icon.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 1189
Last-Modified: Wed, 20 Jan 2021 10:46:07 GMT
ETag: "600809ef-4a5"
Accept-Ranges: bytes
Cache-Control: public, max-age=40815
Expires: Thu, 06 Oct 2022 03:07:13 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
i4.cdn-image.com/__media__/pics/12471/kwbg.jpg
23.36.76.113200 OK 37 kB URL HTTP/1.1 i4.cdn-image.com/__media__/pics/12471/kwbg.jpg
IP 23.36.76.113:0
ASN #20940 Akamai International B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x574, components 3\012- data
Hash ac32f78c89e9e21e66009a46e538e8ca
6f28ca89ed5e69650c93b230579d774ef586f273
f38235e9eeeef5f8b2e931c53a950b8afa0691a4f8bdd32fc79708318cee71fc
GET /__media__/pics/12471/kwbg.jpg HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/jpeg
Content-Length: 37219
Last-Modified: Wed, 20 Jan 2021 10:46:07 GMT
ETag: "600809ef-9163"
Accept-Ranges: bytes
Cache-Control: public, max-age=40815
Expires: Thu, 06 Oct 2022 03:07:13 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
i4.cdn-image.com/__media__/pics/12471/libg.png
23.36.76.113200 OK 1.1 kB URL HTTP/1.1 i4.cdn-image.com/__media__/pics/12471/libg.png
IP 23.36.76.113:0
ASN #20940 Akamai International B.V.
File type PNG image data, 41 x 5, 8-bit/color RGB, non-interlaced\012- data
Hash b06cc0ee3c9be723861a2fe8f3b594e6
4382bf913ea359024f00f6d95f93154bec2b7475
3d876c43f21d31d03eef6d5b51e9cf7d28f6b0f017239300980af88522a173a0
GET /__media__/pics/12471/libg.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 1092
Last-Modified: Wed, 20 Jan 2021 10:46:07 GMT
ETag: "600809ef-444"
Accept-Ranges: bytes
Cache-Control: public, max-age=40815
Expires: Thu, 06 Oct 2022 03:07:13 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
i4.cdn-image.com/__media__/pics/12471/arrow.png
23.36.76.113200 OK 1.1 kB URL HTTP/1.1 i4.cdn-image.com/__media__/pics/12471/arrow.png
IP 23.36.76.113:0
ASN #20940 Akamai International B.V.
File type PNG image data, 12 x 19, 8-bit/color RGBA, non-interlaced\012- data
Hash 9b3b30bf536e8e02958b60fe30988cd3
1614df649e959b231e3f33efbd33a69c0ac1b814
368c4a249c5eeb012917122f5314af8f89e7a7cc583d8bef33950f60cf0214d0
GET /__media__/pics/12471/arrow.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 1060
Last-Modified: Wed, 20 Jan 2021 10:46:07 GMT
ETag: "600809ef-424"
Accept-Ranges: bytes
Cache-Control: public, max-age=40815
Expires: Thu, 06 Oct 2022 03:07:13 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
i4.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.woff
23.36.76.113200 OK 37 kB URL HTTP/1.1 i4.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.woff
IP 23.36.76.113:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 37152, version 1.0\012- data
Hash ab6a4224e23ff1a6f0011da5807ff728
7fcb6a535150e2d16f83aad0a92fc48660212b97
9bcf8c298e71f590ac9180df7724c3ff5fe9d84766a5103cf783178639cfcd29
GET /__media__/fonts/ubuntu-r/ubuntu-r.woff HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://iyfhshsp.com
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/font-woff
Content-Length: 37152
Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT
ETag: "600809b7-9120"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
i4.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.woff
23.36.76.113200 OK 38 kB URL HTTP/1.1 i4.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.woff
IP 23.36.76.113:0
ASN #20940 Akamai International B.V.
File type Web Open Font Format, TrueType, length 37928, version 1.0\012- data
Hash eaba38ce39b5e77c6a2f6d4c2d4f9cdb
343a50542a64043963234b3fd17b815b8bcfcbd5
0869d8fe5cfd1878d7cd657cf0b0e9f76f788f3800671d4e36672b271135a5ee
GET /__media__/fonts/ubuntu-b/ubuntu-b.woff HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://iyfhshsp.com
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/font-woff
Content-Length: 37928
Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT
ETag: "600809b7-9428"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
iyfhshsp.com/?domain=estartupchallenge-egabon.org&dn=estartupchallenge-egabon.org&fp=H%2BdnNeO%2FG2LrPMjae5IGJGunr4wNnt5lZwx4vKik%2BIhA5tfLgTh1rE1qozDmaJbsAoYldw6y9%2FmC241tEEZzg%2B%2BJ52aEIY4%2BlQQrrm43ZOgVikB9DnG%2F%2BhRN6tOTsd0mar6aMitgyNAYxauenpmZPJ69t2DeRR07m63l9pllo5JygZ9z4vr%2BSwGz5DxJD%2BC8&prvtof=a4%2Bi8OBXVFZGEVdv78EJyV9I5bzR%2B4nU73dbsE6gEUp2HmowFqgLGRK6XUqpwyS0SBlJu6eLN6mZaNHHmagLTw%3D%3D&poru=WsPP%2FRC5s%2F0eq4H6GXxfeXtuU6nz1X9YQ1cJ1nnrLYPWllLEOD8X%2F7vKfQESIu6y%2FzTWfVGMz8KGXMn3g4CYH6yuZ8zBljAVRL6Kg8HD7n0%3D&
208.91.196.46200 OK 8.0 kB URL HTTP/1.1 iyfhshsp.com/?domain=estartupchallenge-egabon.org&dn=estartupchallenge-egabon.org&fp=H%2BdnNeO%2FG2LrPMjae5IGJGunr4wNnt5lZwx4vKik%2BIhA5tfLgTh1rE1qozDmaJbsAoYldw6y9%2FmC241tEEZzg%2B%2BJ52aEIY4%2BlQQrrm43ZOgVikB9DnG%2F%2BhRN6tOTsd0mar6aMitgyNAYxauenpmZPJ69t2DeRR07m63l9pllo5JygZ9z4vr%2BSwGz5DxJD%2BC8&prvtof=a4%2Bi8OBXVFZGEVdv78EJyV9I5bzR%2B4nU73dbsE6gEUp2HmowFqgLGRK6XUqpwyS0SBlJu6eLN6mZaNHHmagLTw%3D%3D&poru=WsPP%2FRC5s%2F0eq4H6GXxfeXtuU6nz1X9YQ1cJ1nnrLYPWllLEOD8X%2F7vKfQESIu6y%2FzTWfVGMz8KGXMn3g4CYH6yuZ8zBljAVRL6Kg8HD7n0%3D&
IP 208.91.196.46:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2220), with CRLF, LF line terminators
Hash 52b116b902d31b3aea5956cea64ac6d7
f86bf22317350f1790018000cc2b3186202135a7
f9d1654bf5eac6f58e7e3c649269d228941fa0d6841996c98d2486150b74bb00
GET /?domain=estartupchallenge-egabon.org&dn=estartupchallenge-egabon.org&fp=H%2BdnNeO%2FG2LrPMjae5IGJGunr4wNnt5lZwx4vKik%2BIhA5tfLgTh1rE1qozDmaJbsAoYldw6y9%2FmC241tEEZzg%2B%2BJ52aEIY4%2BlQQrrm43ZOgVikB9DnG%2F%2BhRN6tOTsd0mar6aMitgyNAYxauenpmZPJ69t2DeRR07m63l9pllo5JygZ9z4vr%2BSwGz5DxJD%2BC8&prvtof=a4%2Bi8OBXVFZGEVdv78EJyV9I5bzR%2B4nU73dbsE6gEUp2HmowFqgLGRK6XUqpwyS0SBlJu6eLN6mZaNHHmagLTw%3D%3D&poru=WsPP%2FRC5s%2F0eq4H6GXxfeXtuU6nz1X9YQ1cJ1nnrLYPWllLEOD8X%2F7vKfQESIu6y%2FzTWfVGMz8KGXMn3g4CYH6yuZ8zBljAVRL6Kg8HD7n0%3D& HTTP/1.1
Host: iyfhshsp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://iyfhshsp.com/?dn=referer_detect&pid=5POL4F2O4
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 15:46:57 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_asivDohRsYXTxa+b4dE2a+TkWrLmWa13SnKIJmWecyzuawgy6O4BBmf8YZIVcAawqa4ebeUDmnDhOrYK0zsRLQ==
Keep-Alive: timeout=5, max=127
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Cache-Control: private
Content-Encoding: gzip
Transfer-Encoding: chunked
searchdiscovered.com/__media__/pics/657/hostergator.gif
208.91.196.4302 Found 246 B URL HTTP/1.1 searchdiscovered.com/__media__/pics/657/hostergator.gif
IP 208.91.196.4:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 6d6711a966a709b625b99abda74a4256
f996b24c7b05bdee4a06c7049cb248445ec0677c
b1656c00a494af260c5e61ff2fc13af17ba49a0ca02aeba2c809fe4122ba01f3
GET /__media__/pics/657/hostergator.gif HTTP/1.1
Host: searchdiscovered.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 302 Found
Date: Wed, 05 Oct 2022 15:46:58 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
Location: http://freeresultsguide.com/__media__/pics/657/hostergator.gif
Content-Length: 246
Keep-Alive: timeout=5, max=128
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
searchdiscovered.com/__media__/pics/657/error-bg.gif
208.91.196.4302 Found 243 B URL HTTP/1.1 searchdiscovered.com/__media__/pics/657/error-bg.gif
IP 208.91.196.4:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9cd9326e3e1614d22b75e8d32ea585c0
1f2cd244c4541bcd15e2943e23f135029aa7adb8
f1e045a975646a4d179b4bd606dab7d7136f33782be4ae53caee769d78c8cec3
GET /__media__/pics/657/error-bg.gif HTTP/1.1
Host: searchdiscovered.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 302 Found
Date: Wed, 05 Oct 2022 15:46:58 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
Location: http://freeresultsguide.com/__media__/pics/657/error-bg.gif
Content-Length: 243
Keep-Alive: timeout=5, max=124
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Wed, 05 Oct 2022 16:57:55 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Wed, 05 Oct 2022 16:57:55 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Wed, 05 Oct 2022 16:57:55 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Wed, 05 Oct 2022 16:57:55 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4257
Expires: Wed, 05 Oct 2022 16:57:55 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 229c99cfb655a8c9f1a22de69fdff73c
6b5db8fbfb56f083d54b13e7660d0e4bc866aa00
f4099e9153c3dc481add95b0f24dbb8f6d65cc74ad5631d9cb6c6f2a0351843d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7021
x-amzn-requestid: 2e30bdac-360e-4d0a-8bb7-c3144e074abe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8ucHb1oAMFjYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7f5-18ba6bc50cb32b1e14c882bd;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Sd2_YDHr3j7ym7wfFyQh9kg8FP-Et2nJUOo1v_TNbI3PvpzEY5KJ2Q==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 22:07:19 GMT
age: 63579
etag: "6b5db8fbfb56f083d54b13e7660d0e4bc866aa00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
34.120.237.76200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5d7d7df8d4c440f9db445c3d99e818d6
612b6dbd4ba895c167964ff7e6d9263013b52b0a
bf527a814c78f9e010cce4ba593c9146d54a2137d1f147f7a6250fbad81956ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3585
x-amzn-requestid: ccb6f0c8-4d9b-48b8-aaf6-16781dc4c86b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaHFlEcFoAMFS3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a5223-5c9276c873efee993ba54667;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 03:08:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: T8m1q2L45TWDVRBa-R2W70yq9BauBK3G4IX54AGIxdRhG736T974kg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 04:05:29 GMT
age: 42089
etag: "612b6dbd4ba895c167964ff7e6d9263013b52b0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
34.120.237.76200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3257b782efae9b64e6e18a547866ec50
4daf0c001e86af8477fb097e8ca932edb8e5f981
899f9692e86405aa288d88dd285a6fe26bedab1a2ca4693212476063890b01a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5832
x-amzn-requestid: c4427edd-3d71-47d0-a2d3-b3bfed089535
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1FuUoAMFhBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-46ddff150da4141d23fc0d8a;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iR82CJ6A06dpqy_nm6JrmjeUJT-uhI5rr0dr6ZnhrQQo9Jqxh10qRQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 15:44:25 GMT
age: 153
etag: "4daf0c001e86af8477fb097e8ca932edb8e5f981"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1de7c17a0ba9295135e7f8b490b6a8d3
70e8d1589f3daf71378965dd197934e220fb6aa4
ee559ce3166479e2b930be7d18525f5c2d164aed8ca005302ddaf3bfe37eec24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8926
x-amzn-requestid: 27fc8976-af8d-40a3-b701-0642fa135ec4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zf8s1GSbIAMFTiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ca7eb-4d4c7837576e0fdb5828fe3b;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YzVofPSJC-YVU1Q1V9AnjNeQTa1BQEh6ZiH2HjSeeX5RygysFP7oAA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 21:42:34 GMT
age: 65064
etag: "70e8d1589f3daf71378965dd197934e220fb6aa4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 100559d746bedd7c3802661c875c35ee
5261a6c2ee6d6cc87e91ee82e32d8be234db393e
ff06f31267ddcc9a0d84ddc68932872bfed29d072783c3a1dd3790d41c280aec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8816
x-amzn-requestid: b9f3ec8a-f478-4405-b275-e21f2d7d89d4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZKK7gFPJIAMF-7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333f1e3-250348e6140f3c74762263ea;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 07:04:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: F1ZWwxLKhRC6oSh6gnUxEm5AnYcY-mezJw9mNJ8GmNWnATAKx1JxSg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 22:42:26 GMT
age: 61472
etag: "5261a6c2ee6d6cc87e91ee82e32d8be234db393e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fc2ddd86450d64d3fb659ab4e78be58
bbe71936b78a8c34d03ab87948dc840b35c6948f
84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: szhtD9f4RuQaDKXe7LElSR0yOKo9cYa1i2YMeG3eSpBXP8ePcdzQig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 07:29:32 GMT
age: 29846
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
freeresultsguide.com/__media__/pics/657/error-bg.gif
208.91.196.4200 OK 2.0 kB URL HTTP/1.1 freeresultsguide.com/__media__/pics/657/error-bg.gif
IP 208.91.196.4:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type GIF image data, version 89a, 526 x 2\012- data
Hash 2a0b3de86b6c212e0220f3a9757a5dbf
493f8e5c7a8c7c11645a99d22cfa8d637da6fe3e
76261ee6190ec30c36b297048d62eeb55240baa74253c6756c746d07d1fd8154
GET /__media__/pics/657/error-bg.gif HTTP/1.1
Host: freeresultsguide.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 15:46:58 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
Last-Modified: Wed, 20 Jan 2021 10:46:09 GMT
ETag: "7d7-5b952a9b9b24e"
Accept-Ranges: bytes
Content-Length: 2007
Keep-Alive: timeout=5, max=127
Connection: Keep-Alive
Content-Type: image/gif
freeresultsguide.com/__media__/pics/657/hostergator.gif
208.91.196.4200 OK 8.0 kB URL HTTP/1.1 freeresultsguide.com/__media__/pics/657/hostergator.gif
IP 208.91.196.4:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type GIF image data, version 89a, 220 x 63\012- data
Hash 1898aad5d11be03025f15b9137efa371
f61413766a2adcd018174b407e3e8e7e6f76feae
c91b0f2a8767a2c2dfb64ee200bd110a476b613a855a0c8982dd3c9b93095bb3
GET /__media__/pics/657/hostergator.gif HTTP/1.1
Host: freeresultsguide.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Date: Wed, 05 Oct 2022 15:46:58 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
Last-Modified: Wed, 20 Jan 2021 10:46:09 GMT
ETag: "1f47-5b952a9b9b24e"
Accept-Ranges: bytes
Content-Length: 8007
Keep-Alive: timeout=5, max=125
Connection: Keep-Alive
Content-Type: image/gif
i4.cdn-image.com/__media__/pics/12471/libgh.png
23.36.76.113200 OK 1.1 kB URL HTTP/1.1 i4.cdn-image.com/__media__/pics/12471/libgh.png
IP 23.36.76.113:0
ASN #20940 Akamai International B.V.
File type PNG image data, 41 x 5, 8-bit/color RGB, non-interlaced\012- data
Hash f7b06b634b1d6a88ef2b4308eec1825b
d465b3fb71919eba724173fbd07d17ed61a79791
b2a2e95373594e8886a28794ea4b448563391ba6871c79e530cd5c76d86bd4fb
GET /__media__/pics/12471/libgh.png HTTP/1.1
Host: i4.cdn-image.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iyfhshsp.com/
HTTP/1.1 200 OK
Server: nginx
Content-Type: image/png
Content-Length: 1081
Last-Modified: Wed, 20 Jan 2021 10:46:07 GMT
ETag: "600809ef-439"
Accept-Ranges: bytes
Cache-Control: public, max-age=43831
Expires: Thu, 06 Oct 2022 03:57:29 GMT
Date: Wed, 05 Oct 2022 15:46:58 GMT
Connection: keep-alive