r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15968
Expires: Wed, 14 Sep 2022 14:02:13 GMT
Date: Wed, 14 Sep 2022 09:36:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 14 Sep 2022 09:09:29 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: otEDCHV_1DvwyUsl_Y6Y7cKis8AHxMaW3ptvvCvASr3flns1VHL5Nw==
Age: 1596
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: H39S4q_ODPrlAU5IbvR1SXxbL-D5LQNYXirrlFRhezUeXVmc5tdkLw==
age: 18050
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 09:36:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 14 Sep 2022 09:03:22 GMT
Expires: Wed, 14 Sep 2022 09:28:04 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ggOcxJoYodLH4mJWlTJ4usOZeCFYMxbeY1mFA7uKjaOnJErTldFe4A==
Age: 1963
shakyafarm.com/
200 OK 3.1 kB IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 20aa4806cb7d9b187aec9f50316cbfa6
3d0a2aa9fa3036f0e237a6f16c9c578039fb6b08
88ce9246f1b924f1756f062ae6cb010d850bb95756d3cf3ceeb889b6614e4696
GET / HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:05 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 08 Sep 2022 15:48:04 GMT
ETag: "d00016-3f5c-5e82c5ae6b175-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3115
Keep-Alive: timeout=5
Content-Type: text/html
ocsp.digicert.com/
200 OK 471 B IP
Hash d3ac56507d17ffff5e8b486406985d68
17d26336cd8ea65af3f23db166945f1b3fbbfbab
e7e321340eed681c1269f715b0214e1511d5762fffbe930e7c157b800afa9a39
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2326
Cache-Control: max-age=169780
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 09:36:06 GMT
Etag: "63218ba4-1d7"
Expires: Fri, 16 Sep 2022 08:45:46 GMT
Last-Modified: Wed, 14 Sep 2022 08:07:00 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.1.3/assets/owl.carousel.min.css
200 OK 747 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.1.3/assets/owl.carousel.min.css
IP
File type ASCII text, with very long lines (2863)
Hash 771fa8c5182cbf333839d3d5779585fa
ca92c8562e163d27fd1f2a598fcd80704f2680e4
a30df9775f8014bf8e3b36a57b67c7500a067674cea75fa6523c55f8125748d6
GET /ajax/libs/OwlCarousel2/2.1.3/assets/owl.carousel.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://shakyafarm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 09:36:06 GMT
content-type: text/css; charset=utf-8
content-length: 747
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf0-bcc"
last-modified: Mon, 04 May 2020 16:04:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 8596185
expires: Mon, 04 Sep 2023 09:36:06 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MnsO0stA0ubY0N%2FPEB5tDfOocmrk5zjL%2B74ILCunWUGXOjF9rHyxftmVXbFHI9G3eOdmYEmbbm9GzWyTu%2BXrob%2FXUHZJ%2F2DnvCVdOUreh8rtLdnejaiYheqSRyzh5NVYrGxvhkw7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74a822e67f6f0b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.2.1/owl.carousel.min.js
200 OK 9.7 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.2.1/owl.carousel.min.js
IP
File type ASCII text, with very long lines (32000)
Hash 0b6b3fdcce3d7d074f5386fdafb2d200
ec0365c092ec2d6b6f1d0130110f99f2ed8a56ee
67f74b262a867f62b2d16c3bdfb2e24351988962e1ba2aadbfc2bdadd9978114
GET /ajax/libs/OwlCarousel2/2.2.1/owl.carousel.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://shakyafarm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 09:36:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 9719
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf0-a70e"
last-modified: Mon, 04 May 2020 16:04:00 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 490107
expires: Mon, 04 Sep 2023 09:36:06 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oYsYkybgWrZXcmfwcoP%2FUXi6gneVBdjIFZKU8K1LPsFscwuSnuFfuTatZAI2oJuFuxrJDM3r5vAQxgKq1YFXyH%2FsRbx6zfZv67vgURb9J5rGj5s8RgQUEGZbOu%2FRRISfJPXxT4Rl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74a822e67f780b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abea4dc307fd4da34aac369f4316657c
ef7be7963fa8154c83b78d6ca8518b8448f079ff
1c50a6b2765a5108f31d7a31c98c62d293440c84e8bf63f9dac685be9e3d77d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 09:36:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4a68e0856575d52f7778bc821b5c881b
0956533f660fd0e7096540292f9b60451f60f148
0fde07586af73476634e76ed5badfce43d8b4ec078fd0f172d80c28ad98e3d27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 09:36:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/js?key=AIzaSyA8eaHt9Dh5H57Zh0xVTqxVdBFCvFMqFjQ&callback=initMap
200 OK 54 kB URL HTTP/2 maps.googleapis.com/maps/api/js?key=AIzaSyA8eaHt9Dh5H57Zh0xVTqxVdBFCvFMqFjQ&callback=initMap
IP
File type ASCII text, with very long lines (2460)
Hash 63cf855e9ca73ee1b1ff048ea26fa6f1
f1a1831a17a4c0fa20244ec10efcb162e7528c7a
05271b16a3fbc64e6e2ec00ca1618fd50616f8ce34875d5e75b7bddd8506ee4f
GET /maps/api/js?key=AIzaSyA8eaHt9Dh5H57Zh0xVTqxVdBFCvFMqFjQ&callback=initMap HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://shakyafarm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Wed, 14 Sep 2022 09:36:06 GMT
expires: Wed, 14 Sep 2022 10:06:06 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 53934
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=20
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4a68e0856575d52f7778bc821b5c881b
0956533f660fd0e7096540292f9b60451f60f148
0fde07586af73476634e76ed5badfce43d8b4ec078fd0f172d80c28ad98e3d27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 09:36:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WDmI6y57NJJYL4/o995U9Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: g7PVA9HeiAfjfMHOsy+hAk8+PXM=
shakyafarm.com/css/responsive.css
200 OK 620 B URL HTTP/1.1 shakyafarm.com/css/responsive.css
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash ba19abf27f1a4858f171c79f7210cd67
20d4ad107edeafb1d8a39e657c5db4b90bd19a17
d3dd6f5c09a0b050af08ec033fc3b8f3ab3aee9df0d01513c36bdd8fb540ab5b
GET /css/responsive.css HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:06 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:41:47 GMT
ETag: "d001aa-be3-5e82c4464d485-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 620
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/css
shakyafarm.com/css/style.css
200 OK 2.4 kB URL HTTP/1.1 shakyafarm.com/css/style.css
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with CRLF line terminators
Hash e7596834925d011b0dbef6d5bf0c4fd3
56d4dbfbd22e9bb7865495a55d66380409e94ab2
b9a41f2d85f11c3c4a0922de04f66824a0dca081568f782defd231a691d1b684
GET /css/style.css HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 08 Sep 2022 15:41:47 GMT
ETag: "d001ac-3127-5e82c446764c8-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2433
Keep-Alive: timeout=5
Content-Type: text/css
shakyafarm.com/css/bootstrap.css
200 OK 25 kB URL HTTP/1.1 shakyafarm.com/css/bootstrap.css
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (570)
Hash 0395c734542d816552c5a34b3c3b5067
14616c51f4f629ad7a7abdb186df63a8b51ecaa0
d2514d08cbc573e086f0c722f56f9e7cee9165b5b0507e966925225a6b8aff08
GET /css/bootstrap.css HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 08 Sep 2022 15:41:48 GMT
ETag: "d001ab-2ef5c-5e82c44717ec7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 25436
Keep-Alive: timeout=5
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 09:36:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 09:36:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://shakyafarm.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:34:08 GMT
expires: Thu, 07 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 568919
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 09:36:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://shakyafarm.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 02:02:22 GMT
expires: Sun, 10 Sep 2023 02:02:22 GMT
cache-control: public, max-age=31536000
age: 372825
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 09:36:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://shakyafarm.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 08:31:01 GMT
expires: Wed, 13 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
age: 90306
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 09:36:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
shakyafarm.com/js/jquery-3.4.1.min.js
200 OK 31 kB URL HTTP/1.1 shakyafarm.com/js/jquery-3.4.1.min.js
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 053401afa561c4681e6919e5d661f9ae
b32afe139687a84c957e7d41d3d90857c9f8f631
de24a2f3f00e81b8dcb284f7faefe661f1d965c177cc8b5f62070f8d0b14039b
GET /js/jquery-3.4.1.min.js HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:06 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:41:07 GMT
ETag: "d001a9-15851-5e82c42087636-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30679
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: application/javascript
shakyafarm.com/js/bootstrap.js
200 OK 25 kB URL HTTP/1.1 shakyafarm.com/js/bootstrap.js
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type ASCII text, with very long lines (328)
Hash 084ca191f00665aafddcbc12ef322865
236d5187d7041cd0daaecd6de3cc9b1c9b981071
22a1de574307eb05c03f647a31a531efd7e8765be4ed01e2ec937bc702474f91
GET /js/bootstrap.js HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 08 Sep 2022 15:41:22 GMT
ETag: "d001a8-2165b-5e82c42e66fb3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 25418
Keep-Alive: timeout=5
Content-Type: application/javascript
shakyafarm.com/images/youtube.png
200 OK 1.5 kB URL HTTP/1.1 shakyafarm.com/images/youtube.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 222569a6e87d63ab8307a336ba24324c
375b3cbe92751ea0ed3835350ecdba69d0d07942
e2d0a3cfab52ea33967606ce4c8a074e15e6401d8584699a0a3809060206e33b
GET /images/youtube.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 08 Sep 2022 15:39:07 GMT
ETag: "d001a2-5aa-5e82c3adce141"
Accept-Ranges: bytes
Content-Length: 1450
Keep-Alive: timeout=5
Content-Type: image/png
shakyafarm.com/images/arrow.png
200 OK 1.1 kB URL HTTP/1.1 shakyafarm.com/images/arrow.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 35 x 23, 8-bit/color RGBA, non-interlaced\012- data
Hash 1458f1f935ba97dc50c99a5045b55ac2
d273d2a0f8879c194adc9f63d488e52cb2a63fe2
5cca729d91854607ea680887c3808fb8bcabcfc1ccdc2b569421004ff4468400
GET /images/arrow.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 08 Sep 2022 15:39:00 GMT
ETag: "d0005a-476-5e82c3a6e9e0f"
Accept-Ranges: bytes
Content-Length: 1142
Keep-Alive: timeout=5
Content-Type: image/png
shakyafarm.com/images/linkedin.png
200 OK 1.4 kB URL HTTP/1.1 shakyafarm.com/images/linkedin.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 45d2ae59bae12e9d308dcc9a4eda7505
4f8a41b0252e44d7d653be4c0e086f9b630ed2ef
a09ec362537afeec654b8a897363f1da61914672d287ae617f5944fab36a2d76
GET /images/linkedin.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 08 Sep 2022 15:39:00 GMT
ETag: "d000d3-571-5e82c3a77f8a5"
Accept-Ranges: bytes
Content-Length: 1393
Keep-Alive: timeout=5
Content-Type: image/png
shakyafarm.com/images/logo.png
200 OK 3.0 kB URL HTTP/1.1 shakyafarm.com/images/logo.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 336 x 76, 8-bit/color RGB, non-interlaced\012- data
Hash 481a37198999cb8dee5edd4b812455e5
e94227e0dc849d05ea3eff147ebaf8019a2d949f
83e50b269b1e1145e3ef1d2fc1ea5432718974ad75738664e797e002ac093678
GET /images/logo.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:02 GMT
ETag: "d00198-baa-5e82c3a91aed2"
Accept-Ranges: bytes
Content-Length: 2986
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
shakyafarm.com/images/search-icon.png
200 OK 1.6 kB URL HTTP/1.1 shakyafarm.com/images/search-icon.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 8d986065616ce45c98c8b1ce04e1383d
a873a20c001eddd18a14e6f5632fabdcb0793466
7270842684fcb1497c956f78f08a37ea2dec2d0d86be67ba1e1c90792cd5d5b6
GET /images/search-icon.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/css/style.css
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 08 Sep 2022 15:39:03 GMT
ETag: "d0019d-631-5e82c3a9e264d"
Accept-Ranges: bytes
Content-Length: 1585
Keep-Alive: timeout=5
Content-Type: image/png
leostop.com/tracking/tracking.js?_=1663148153250
301 Moved Permanently 0 B URL HTTP/1.1 leostop.com/tracking/tracking.js?_=1663148153250
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tracking/tracking.js?_=1663148153250 HTTP/1.1
Host: leostop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 14 Sep 2022 09:36:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 14 Sep 2022 10:36:07 GMT
Location: https://leostop.com/tracking/tracking.js?_=1663148153250
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S6gxBEPaHpEkKfMkn5xOq9dRCZ9DAYwNelkc1igM3oRsqrg8ZJNZTnFi5CbvvwoC20ognigMOjrxmImwehdMS%2F2lhJ8DvEkJ7iodXTAWfu1OQiYZPEDNembxzZddLg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a822ef4fa9b521-OSL
alt-svc: h2=":443"; ma=60
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash cf1a7bdfd331c6b4108c858a4ef31ae4
5c134709c63f960d3f026cd9c92807db1d1e54f1
b132deccc2f7be3d5cfb7c50277b435acd6c63f8cb101968f2e2f4a2f0672433
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B132DECCC2F7BE3D5CFB7C50277B435ACD6C63F8CB101968F2E2F4A2F0672433"
Last-Modified: Sun, 11 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=626
Expires: Wed, 14 Sep 2022 09:46:33 GMT
Date: Wed, 14 Sep 2022 09:36:07 GMT
Connection: keep-alive
shakyafarm.com/images/s-1.jpg
200 OK 15 kB URL HTTP/1.1 shakyafarm.com/images/s-1.jpg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 259x194, components 3\012- data
Hash ceee5d17ae53695c94426bfa4e0a7c7a
b9e15ab075509465adf30587d119241d27cc8f1c
0eb4e8f27143d92f1f4d63a64d872ecb0cc6a35c00f9715045e0005ebb3f11c7
GET /images/s-1.jpg HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/css/style.css
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:03 GMT
ETag: "d0019c-3a21-5e82c3a9db8ec"
Accept-Ranges: bytes
Content-Length: 14881
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9463
Expires: Wed, 14 Sep 2022 12:13:50 GMT
Date: Wed, 14 Sep 2022 09:36:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9463
Expires: Wed, 14 Sep 2022 12:13:50 GMT
Date: Wed, 14 Sep 2022 09:36:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26eefe41-9675-409e-9a6b-8c39594eb7de.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26eefe41-9675-409e-9a6b-8c39594eb7de.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 967db8594cfbc60139ea4bccfe259742
be8239300d4abfb14466655eedb6b277543ad8b2
eb6585e04cd275e2bf02c2cf8d8693e43f0c0a3e7fec0092fc2ff18025b45dde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26eefe41-9675-409e-9a6b-8c39594eb7de.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7543
x-amzn-requestid: a8a09d68-971d-4d84-bf6b-ca78644927b4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yau8DHQ4IAMFzFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f84c-54803f1d5f1777f334c7a4d5;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:38:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r4qPNiUXDiV_XGCo5FGPM_yuDeYj5n09eonvoNMdqymZnc5aDmhTVg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:59:56 GMT
age: 41771
etag: "be8239300d4abfb14466655eedb6b277543ad8b2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7859b5f-1c86-429e-be16-f7b41657b096.jpeg
200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7859b5f-1c86-429e-be16-f7b41657b096.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7be52d818b206e064541ef4f4b0786b
7674123112859fd79ee9214c5308ad6a5e4ed015
bb011cf1e3c97c42f22c0553b64c23f120fa52d4bc7b56b5bde5678226aff0ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7859b5f-1c86-429e-be16-f7b41657b096.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16980
x-amzn-requestid: 7c555cd5-4a33-452e-82d4-cac3282c0b0f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYZfRHYOoAMFtIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320092e-0bbd43cc499db9ed24226439;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 04:38:06 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: m4lRTnfzeQluGV3fqyeSS6yLeU8tcfijOqcqyVdZ2L2pENHfWdrUHg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 09:39:44 GMT
age: 86183
etag: "7674123112859fd79ee9214c5308ad6a5e4ed015"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2157f7cfbdeb607f28ae51eb090f2c3
33d0dcadaa42179b2eae914c8ad16c9c088afbc9
135cd89c2c82f0f5e53d2612d5eac868c175b28a567a07e63a2073942e36a066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6078
x-amzn-requestid: e09c099f-5a2d-49d7-b6ab-e16f09c28bd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEEM5IAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-0fbb7b3d0cd6fbfa04f5a5d2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ur-HTN2DS8b3ojSQldJOZi6YW2wtCwRfbGqxg49ZUJ_00hC_rFxYEw==
via: 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:05:07 GMT
age: 41460
etag: "33d0dcadaa42179b2eae914c8ad16c9c088afbc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
shakyafarm.com/images/left-arrow.png
200 OK 1.1 kB URL HTTP/1.1 shakyafarm.com/images/left-arrow.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 30 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash ef4ef0677c7b7aac3639a9d579d8b3a0
1c72baf883105ec2757191bcbbeb1d591d854fe0
9d01459f8eaf9ad443238c7c8c43a0981dc3e990fa6d73fa87bdd69f2cd94bd9
GET /images/left-arrow.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/css/style.css
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:01 GMT
ETag: "d000d4-460-5e82c3a7d0d74"
Accept-Ranges: bytes
Content-Length: 1120
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5c31b50-df9d-4fb5-8912-45e00991efb0.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5c31b50-df9d-4fb5-8912-45e00991efb0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0a8f751d08647c72b709802aef65c313
41d9a867d08faf7ff6269e8be37170db5ccc4b12
ee7ac0fc01b3820dd1125644a4f260595a387385c835857ac8ab128441fc3e12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5c31b50-df9d-4fb5-8912-45e00991efb0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8658
x-amzn-requestid: 02eef443-b348-43c4-a541-d9bd5f8fcb72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYvltHKfIAMFb6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202c8a-0f779de53c6380b11012eef9;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:08:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7XmvaFkSaTqmjODHGlIFlNECiQsEBjVyBAeoOTWOKIx-hiXS5RFEng==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 07:21:54 GMT
age: 8053
etag: "41d9a867d08faf7ff6269e8be37170db5ccc4b12"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf118ca5-e4f8-4e97-a3c2-87e36a56e609.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf118ca5-e4f8-4e97-a3c2-87e36a56e609.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b20499b3b8ef7b8ee73bd8b27e8c0c16
744a852e9357455d55e72809841411258fec44a9
457c8a9e4974a9529fa852b37f7ffc083e0eac987fe47aaebda808bf9f9f2941
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf118ca5-e4f8-4e97-a3c2-87e36a56e609.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9270
x-amzn-requestid: bba505a1-bbba-4d14-ad3a-1f72c028cc43
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLj-YGaOIAMFeOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ae6c2-08d743cc73070f6653991180;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 07:09:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vGRrbI4hDMlyKh7qDB3mVRNKJW6vqpnJR94CU6lZVyTzNqjmI0hrpA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 23:11:58 GMT
age: 37449
etag: "744a852e9357455d55e72809841411258fec44a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 56811a1a20a467464e1f3da171ef8b14
366b2090d409d694b72b4b4131df46dd65d69c5a
4c208fb88884166adf4ecc5882f75948b4a87d85c76ad6e7137e8edbd125c996
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15547
x-amzn-requestid: a78f7d90-84c3-4198-88bf-1d722c37f09f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv4EUDoAMF13A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7ff-49535e5525606250306488ba;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CWzE6n2U7hSFcSIHX5z76DPIid9pvbOqM6ikOlegBxzbuRThMeLKZA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:46:14 GMT
etag: "366b2090d409d694b72b4b4131df46dd65d69c5a"
content-type: image/jpeg
age: 42593
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
shakyafarm.com/images/shakya1.jpg
200 OK 38 kB URL HTTP/1.1 shakyafarm.com/images/shakya1.jpg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, hostcomputer=imagery4], baseline, precision 8, 794x530, components 3\012- data
Hash da4757275ba02ef2ed173d69a63cf740
0d12dc89fab0327dd0af8ff8327db86e87c80225
a3a6618debaa528324f715fd3deaa597bb03db6c9079f98717db7f52fadba56d
GET /images/shakya1.jpg HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/css/style.css
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:04 GMT
ETag: "d0019e-9290-5e82c3ab11610"
Accept-Ranges: bytes
Content-Length: 37520
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg
leostop.com/cgi-sys/suspendedpage.cgi?_=1663148153250
301 Moved Permanently 0 B URL HTTP/1.1 leostop.com/cgi-sys/suspendedpage.cgi?_=1663148153250
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /cgi-sys/suspendedpage.cgi?_=1663148153250 HTTP/1.1
Host: leostop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://shakyafarm.com/
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Wed, 14 Sep 2022 09:36:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 14 Sep 2022 10:36:07 GMT
Location: https://leostop.com/cgi-sys/suspendedpage.cgi?_=1663148153250
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8P0I0cjnOK6f6iBO36ugolmLLAoKUXl54RWiozxrPGjdeofvbh4b8WPHc56ZVA21ZMK%2FhW06YXIoYMz4gyKzQV6ojUMFznwmt4UUgMjJJLUn4PzF9pZ7V%2FPw%2FJ%2FBCA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74a822f189deb521-OSL
alt-svc: h2=":443"; ma=60
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash cf1a7bdfd331c6b4108c858a4ef31ae4
5c134709c63f960d3f026cd9c92807db1d1e54f1
b132deccc2f7be3d5cfb7c50277b435acd6c63f8cb101968f2e2f4a2f0672433
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B132DECCC2F7BE3D5CFB7C50277B435ACD6C63F8CB101968F2E2F4A2F0672433"
Last-Modified: Sun, 11 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=626
Expires: Wed, 14 Sep 2022 09:46:33 GMT
Date: Wed, 14 Sep 2022 09:36:07 GMT
Connection: keep-alive
shakyafarm.com/images/s-2.jpeg
200 OK 16 kB URL HTTP/1.1 shakyafarm.com/images/s-2.jpeg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 525x350, components 3\012- data
Hash 2680f2b85aadd2a65d7cd2162d4b9e7c
438200bfb237943b2e8d6bad60066e8637aa3436
11f7063d66f90125a79ba168b97bb21419958620784fa15a42ae7f04115d6078
GET /images/s-2.jpeg HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/css/style.css
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:02 GMT
ETag: "d0019a-3e8b-5e82c3a989865"
Accept-Ranges: bytes
Content-Length: 16011
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg
shakyafarm.com/images/shakyapaya.jpg
200 OK 11 kB URL HTTP/1.1 shakyafarm.com/images/shakyapaya.jpg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3\012- data
Hash 1bb2bcb450ebda15bd0b62c5449333f5
0bddcdc02792fe6556f5fc267fec2811ddadd47e
ac54b29e945b585d8ac0f10024b0cb0e9211533e488a31ba46849d79b5bb6a85
GET /images/shakyapaya.jpg HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/css/style.css
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:05 GMT
ETag: "d0019f-2947-5e82c3aba2a56"
Accept-Ranges: bytes
Content-Length: 10567
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg
shakyafarm.com/images/arrow-black.png
200 OK 1.1 kB URL HTTP/1.1 shakyafarm.com/images/arrow-black.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 35 x 23, 8-bit/color RGBA, non-interlaced\012- data
Hash 6e04f0e13eeef858d66d5e8f0d530820
031bd787b1276f65478340c65d8651a6cbda58b0
81abd3841603d65d5d3b11e8f14a786c9a6c59c83836747f669b16776c9f57f8
GET /images/arrow-black.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:08 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:38:59 GMT
ETag: "d00020-46d-5e82c3a667813"
Accept-Ranges: bytes
Content-Length: 1133
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
fonts.googleapis.com/css?family=Open+Sans:300,400,600,700|Roboto:400,500&display=swap
200 OK 79 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,600,700|Roboto:400,500&display=swap
IP
Hash 736b7fdf612554a93451707bc25c4235
65f06c7a43908a9133135da02fd70a63f28243e1
5f252416144b7e2ec79ea930a19df9254d3d08adbff2ab6e944989092117c2c6
GET /css?family=Open+Sans:300,400,600,700|Roboto:400,500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://shakyafarm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 14 Sep 2022 09:36:06 GMT
date: Wed, 14 Sep 2022 09:36:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
shakyafarm.com/images/shakya2.jpeg
200 OK 50 kB URL HTTP/1.1 shakyafarm.com/images/shakya2.jpeg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type JPEG image data, baseline, precision 8, 640x640, components 3\012- data
Hash 5c22c19a17bf9a0d65eb34d1df355b2a
e072942c150a25248d2fbbde2ea41728441f5919
9b85e4da813348223eaac67c4067c919f8a3223248b2444d0112855bdfeb39d6
GET /images/shakya2.jpeg HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/css/style.css
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:08 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:06 GMT
ETag: "d001a1-c500-5e82c3ad04a86"
Accept-Ranges: bytes
Content-Length: 50432
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg
shakyafarm.com/images/s-3.jpg
200 OK 87 kB URL HTTP/1.1 shakyafarm.com/images/s-3.jpg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 592x587, components 3\012- data
Hash 615570f5a1795e2453730abf87a90621
962e578b48f70814c03d2dbf10b0e29832a4063a
81bd76e7411656a7218778ecb9eb73c146d08510c49456101ad9439f6e1a9c59
GET /images/s-3.jpg HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/css/style.css
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:09 GMT
ETag: "d001a4-154b7-5e82c3afb0c15"
Accept-Ranges: bytes
Content-Length: 87223
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg
shakyafarm.com/images/location.png
200 OK 1.4 kB URL HTTP/1.1 shakyafarm.com/images/location.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 9ea5527e47939f1bb629322ff9a2c8a8
d1cd2865843992709e3c4764bb560892908175d4
d085115774a40f810bb8cffe7576701b3c745754257f34eb97db0b3ca06f7e44
GET /images/location.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:09 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:01 GMT
ETag: "d0018e-556-5e82c3a80d63a"
Accept-Ranges: bytes
Content-Length: 1366
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
shakyafarm.com/images/phone.png
200 OK 1.2 kB URL HTTP/1.1 shakyafarm.com/images/phone.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 74cd09062c2204bdf41f4fa79e89cf17
6442ef2fe27209da7682bac6a5d6c78eb4b3e4a6
752e1b4036c1dd7f720540d732be6e4721142a415ce5045cc861458fea2d7b86
GET /images/phone.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:09 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:02 GMT
ETag: "d00194-4a5-5e82c3a90a919"
Accept-Ranges: bytes
Content-Length: 1189
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
shakyafarm.com/images/mail.png
200 OK 1.3 kB URL HTTP/1.1 shakyafarm.com/images/mail.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash e9d40733de8734b92f8b7301706936e4
9b0a5160255513fa661cb660de6a5809011de715
8a647f00ae819610abb6c2127017e871b993fc02f57a061f7bce77e16ddb2fbb
GET /images/mail.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:09 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:01 GMT
ETag: "d00192-516-5e82c3a8a0da7"
Accept-Ranges: bytes
Content-Length: 1302
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
shakyafarm.com/images/fb.png
200 OK 1.2 kB URL HTTP/1.1 shakyafarm.com/images/fb.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 8c61da75744ec23394d10a9522b9cef3
676c2a355211c6ef01747024c01ed5986c73672e
c0e7138123ce900c792c45faa361051d43df414defaf6412ee4075f13e8f80fe
GET /images/fb.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:09 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:00 GMT
ETag: "d000a4-4d5-5e82c3a6ff5d1"
Accept-Ranges: bytes
Content-Length: 1237
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
shakyafarm.com/images/twitter.png
200 OK 1.5 kB URL HTTP/1.1 shakyafarm.com/images/twitter.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 21efa060f1a9e643fd53d7a046a79b73
33374fb5de82c49b6a03563e532cdb56fa55e4a4
5edbdacf95febf64eab2da103a7d36598b82b9faed757ff3e22bf49d77e88b93
GET /images/twitter.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:09 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:05 GMT
ETag: "d001a0-5d1-5e82c3ac749c9"
Accept-Ranges: bytes
Content-Length: 1489
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
shakyafarm.com/images/right-arrow.png
200 OK 1.1 kB URL HTTP/1.1 shakyafarm.com/images/right-arrow.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type PNG image data, 30 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 4162c777605bd1d209296e6d51fcfa6d
737cc99848a076f3bc696db6709ef47ffa6f444f
a9a048711e9695ad8c46ec60aebc0c5e3f8117a1209033de1e67323fdead3b95
GET /images/right-arrow.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/css/style.css
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:09 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:02 GMT
ETag: "d00195-467-5e82c3a91261a"
Accept-Ranges: bytes
Content-Length: 1127
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
shakyafarm.com/images/maps-and-flags.png
404 Not Found 315 B URL HTTP/1.1 shakyafarm.com/images/maps-and-flags.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /images/maps-and-flags.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 404 Not Found
Date: Wed, 14 Sep 2022 09:36:09 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
shakyafarm.com/images/apple1.jpg
200 OK 152 kB URL HTTP/1.1 shakyafarm.com/images/apple1.jpg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x960, components 3\012- data
Size 152 kB (152521 bytes)
Hash 026db8a1a0502fbdb69952eb0286e2fc
ea41a56d45365f56bf95c1748e2df6a8c6393768
7b7bd42ee6256607edb3203fd70e2917813c65f5dfd470f4faf00d8e4e1b9502
GET /images/apple1.jpg HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/css/style.css
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:07 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:01 GMT
ETag: "d00047-253c9-5e82c3a8769db"
Accept-Ranges: bytes
Content-Length: 152521
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg
shakyafarm.com/images/b.jpg
200 OK 38 kB URL HTTP/1.1 shakyafarm.com/images/b.jpg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 500x500, components 3\012- data
Hash cde228b0ede3f5fc1d39ec4d25698017
31e7621809273b5e379d1e8a7e58c789e0630aa6
3498dd0e1ca19b2ad2ca921c6db31961b81a7b0a12cd1c662d36cab66b9ee07a
GET /images/b.jpg HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:08 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:02 GMT
ETag: "d00199-94a0-5e82c3a938f4d"
Accept-Ranges: bytes
Content-Length: 38048
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg
shakyafarm.com/images/maps-and-flags.png
404 Not Found 315 B URL HTTP/1.1 shakyafarm.com/images/maps-and-flags.png
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /images/maps-and-flags.png HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 404 Not Found
Date: Wed, 14 Sep 2022 09:36:10 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
leostop.com/cgi-sys/suspendedpage.cgi?_=1663148153250
200 OK 39 kB URL HTTP/2 leostop.com/cgi-sys/suspendedpage.cgi?_=1663148153250
IP
Hash 1162008adeaf64db2bac5f9674aba303
820743bd84f40d7c627431a7330ba60929a8b273
e6ab3f7b098c1481535db572e966f52d44dcb063695951ac33b7e56739825ab9
Analyzer Verdict Alert fortinet Phishing
GET /cgi-sys/suspendedpage.cgi?_=1663148153250 HTTP/1.1
Host: leostop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://shakyafarm.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 09:36:08 GMT
content-type: text/html
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cQd0NDBNVMv0UfRW%2FfPvyIdE5b0aGcIrfscbwEiUGSswCGKHAA9KDWq7kW9Q9Wv3lmnDeAz%2BeLDuvTrJhsIqIEru%2B6TmCgWn%2FGFbmqVkdh%2F7RoLoZ8rsTCqdStgKow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a822f19daab512-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
shakyafarm.com/favicon.ico
404 Not Found 315 B URL HTTP/1.1 shakyafarm.com/favicon.ico
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /favicon.ico HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 404 Not Found
Date: Wed, 14 Sep 2022 09:36:10 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
shakyafarm.com/images/welcome.jpg
200 OK 278 kB URL HTTP/1.1 shakyafarm.com/images/welcome.jpg
IP
ASN #26496 AS-26496-GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3\012- data
Size 278 kB (278113 bytes)
Hash 408b01106c4a743d2eebdb3c542fe685
40aa7fa103d6584ccaa0d3ac50dbc86691a34786
e289a109a73dcf22a1dc0b4d4efda163dcac0920fed691bffcce1754ae148123
GET /images/welcome.jpg HTTP/1.1
Host: shakyafarm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://shakyafarm.com/
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 09:36:08 GMT
Server: Apache
Last-Modified: Thu, 08 Sep 2022 15:39:14 GMT
ETag: "d001a6-43e61-5e82c3b4b43b2"
Accept-Ranges: bytes
Content-Length: 278113
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/jpeg
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363e6209-41ce-41be-bd4b-698c502410aa.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363e6209-41ce-41be-bd4b-698c502410aa.jpeg
IP
File type gzip compressed data, max compression\012- data
Hash b265844131afe4f0bad5f4227ab538c4
8d801d2537099a9bad084029d4fcb7648d043218
f5567c1c512781e51b24d8b8e7e188fdf90493efdece28ecb13c5fdcd5add9c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363e6209-41ce-41be-bd4b-698c502410aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8523
x-amzn-requestid: facc0fcf-fc31-4c49-bf47-4992b0496f5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yav8AG1cIAMFmiQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f9e6-3a07501574e592610dcd9d83;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:45:10 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: prZvx-ZAE5HYdtojrYvPoMswGvuaXjVPqY3oEmcwD5dUUXaaJHGpZA==
via: 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:59:12 GMT
age: 41822
etag: "e93a0bcbb4d394a087a6fd2a95e31cd371186433"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
leostop.com/tracking/tracking.js?_=1663148153250
302 Found 0 B URL HTTP/2 leostop.com/tracking/tracking.js?_=1663148153250
IP
GET /tracking/tracking.js?_=1663148153250 HTTP/1.1
Host: leostop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://shakyafarm.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 14 Sep 2022 09:36:07 GMT
content-type: text/html; charset=iso-8859-1
location: http://leostop.com/cgi-sys/suspendedpage.cgi?_=1663148153250
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KNcHNEIDxt5BZFeOh7SyPYm99fnpsjwli8q9ifqUC7HcZsIf4rdINhjUjfXHNBTf%2BigWCQbpCGC%2F4IPxYyPt99ZELddY%2FJobkL32%2B5bKxL0HYaa7Zimh7CyZ4gO2pg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a822ef8a89b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
68.178.145.219
23.36.77.32
104.17.25.14
93.184.220.29