urlquery - report: maglesscrisal.ga/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	Sent bytes	Received bytes	IP
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-29T05:09:31Z	333	391	34.117.237.239
ocsp.pki.goog (4)	175	2018-07-01T08:43:07Z	2023-03-29T05:09:04Z	1372	2798	142.250.74.131
register.freenom.com (1)	0	2014-10-06T20:18:42Z	2023-03-28T12:30:01Z	366	1205	104.155.8.167
img-getpocket.cdn.mozilla.net (7)	1631	2018-06-22T01:36:00Z	2023-03-29T05:09:12Z	3800	77111	34.120.237.76
maglesscrisal.ga (1)	0	2021-04-07T13:01:48Z	2023-03-28T12:27:43Z	348	990	195.20.54.124
www.freenom.com (8)	0	2014-05-27T04:45:17Z	2023-03-29T20:48:42Z	3597	147192	35.186.227.193
www.google-analytics.com (1)	40	2012-10-03T03:04:21Z	2023-03-29T06:01:47Z	372	20615	216.58.207.206
r3.o.lencr.org (9)	344	2020-12-02T09:52:13Z	2023-03-29T05:09:11Z	3042	7979	23.36.77.32
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-29T05:09:03Z	782	2372	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-29T05:09:31Z	413	5882	34.160.144.191
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-29T05:09:32Z	606	127	52.38.211.109
domain.dot.tk (1)	166571	2012-05-22T19:00:16Z	2023-03-28T20:22:07Z	454	253	88.198.252.121
ocsp.sectigo.com (3)	487	2019-11-29T12:50:24Z	2023-03-29T08:59:28Z	1020	8810	172.64.155.188
ajax.googleapis.com (1)	12905	2013-08-16T11:51:31Z	2023-03-29T10:10:07Z	391	30424	216.58.207.234

Timestamp	Severity	Source IP	Destination IP	Alert
2023-03-28 10:30:17 UTC	low	Client IP	Internal IP	ET INFO DNS Query for Suspicious .ga Domain
2023-03-28 10:30:21 UTC	medium	Client IP	195.20.54.124	ET INFO HTTP Request to a *.ga domain
2023-03-28 10:30:21 UTC	medium	Client IP	Internal IP	ET DNS Query to a .tk domain - Likely Hostile
2023-03-28 10:30:21 UTC	medium	Client IP	Internal IP	ET DNS Query to a .tk domain - Likely Hostile
2023-03-28 10:30:21 UTC	medium	Client IP	88.198.252.121	ET POLICY HTTP Request to a *.tk domain

Date	UQ / IDS / BL	URL	IP
2023-03-28 10:30:09 UTC	0 - 5 - 0	maglesscrisal.ga/	195.20.54.124
2023-03-12 08:20:04 UTC	0 - 4 - 0	585250212457854201.ml/	195.20.54.124
2023-02-22 22:46:02 UTC	0 - 6 - 1	claim10x.gq/	195.20.54.124
2023-02-09 12:54:33 UTC	0 - 1 - 0	spidaretrag.gq/e9f1d1a4c0d6b36f6a8eaa6bbf9da1 (...)	195.20.54.124
2023-02-09 12:51:11 UTC	0 - 5 - 0	spidaretrag.gq/eed8a55eb1109ef8a81f4330d6f42f (...)	195.20.54.124

Date	UQ / IDS / BL	URL	IP
2023-06-04 07:06:06 UTC	0 - 1 - 0	sdckljkmcgh.cf/	195.20.48.56
2023-06-03 23:36:27 UTC	0 - 2 - 1	addhun.ml/	195.20.53.230
2023-06-02 02:25:49 UTC	0 - 4 - 0	bikinixtubeg6m8.tk/hot/animal-sex-free.avi.exe	195.20.45.233
2023-06-01 23:27:50 UTC	0 - 4 - 0	imagespublic.tk/	195.20.46.161
2023-06-01 17:05:15 UTC	0 - 2 - 0	254nt.ga/	195.20.52.121

Date	UQ / IDS / BL	URL	IP
2023-03-28 10:30:09 UTC	0 - 5 - 0	maglesscrisal.ga/	195.20.54.124

Date	UQ / IDS / BL	URL	IP
2023-03-28 07:44:20 UTC	0 - 5 - 0	aigaihgag.ml/valentinaa	195.20.54.183
2023-03-27 23:24:53 UTC	0 - 4 - 0	perjatelick.ga/	195.20.49.114
2023-03-27 17:33:47 UTC	0 - 5 - 0	hostcigen.ga/	195.20.55.45
2023-03-27 14:39:47 UTC	0 - 4 - 0	eqovegojag.ml/1560-town-of-cobourg-address-bo (...)	195.20.50.107
2023-03-27 14:20:54 UTC	0 - 4 - 0	serv-ca.ga/CA	195.20.55.206

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0FF6DF80A892199848FB943AF78541B66EFC09A7AB70D4B169906FDBAC1EABF8" Last-Modified: Mon, 27 Mar 2023 14:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6157 Expires: Tue, 28 Mar 2023 12:12:34 GMT Date: Tue, 28 Mar 2023 10:29:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 93f633ce30c038eb581544323c5a971e Sha1: 2f60526cb750c6babccc207f75fb5a8ae6f7598b Sha256: 0ff6df80a892199848fb943af78541b66efc09a7ab70d4b169906fdbac1eabf8
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F48CBE4D605E660A45267400E0ADD4F7BC7CD523C450376ECD8E3A7F094ABF56" Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8163 Expires: Tue, 28 Mar 2023 12:46:00 GMT Date: Tue, 28 Mar 2023 10:29:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 911d74784325663a0d95b463b0e9ae9b Sha1: 21e999229be584d8e42696bce71236ad5bcb9a25 Sha256: f48cbe4d605e660a45267400e0add4f7bc7cd523c450376ecd8e3a7f094abf56
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Content-Length, Backoff, Alert, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Tue, 28 Mar 2023 10:28:01 GMT age: 116 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: ed282214b024a7895d90e229e92bb1cc Sha1: 1f447aa59287ce2b45860a1a909d005a41305f77 Sha256: a35ae9f89cbc77ed5fe849acdc2701592799c335f2674776d69c25bca0a00c2e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "7C7EF189B14109B44AA96454EA1B94BCBD3D69599CC7BA429F8234F6ACD88A9B" Last-Modified: Mon, 27 Mar 2023 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7234 Expires: Tue, 28 Mar 2023 12:30:31 GMT Date: Tue, 28 Mar 2023 10:29:57 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c0d9353dc46e88bf564ed464b0b073c7 Sha1: 0b5ce170e7db24267a3ba5b79a48548b1acd2e5b Sha256: 7c7ef189b14109b44aa96454ea1b94bcbd3d69599cc7ba429f8234f6acd88a9b
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: GT56j5lsCJhMcXhoVwJJZ/CC7yh6WAPkvgut8SDP9AtCKQRsIl3QXsHHnjoTdZHzlOM4QtnzhEc= x-amz-request-id: PDG9Z617P5KCK9ZF x-amz-server-side-encryption: AES256 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 28 Mar 2023 09:56:10 GMT age: 2027 last-modified: Sat, 11 Mar 2023 16:53:15 GMT etag: "e7bace7c1e04d44012e37ddffe36e5d5" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: e7bace7c1e04d44012e37ddffe36e5d5 Sha1: 3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2 Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Tue, 28 Mar 2023 10:29:57 GMT content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Pragma, Content-Type, Content-Length, Backoff, Alert, ETag, Last-Modified, Expires, Retry-After, Cache-Control content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Tue, 28 Mar 2023 10:14:35 GMT age: 923 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D1FF10BFE40F290935ABE1FEEB975A6AF8CF310F9CE9D45BBF482A604DA73560" Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8664 Expires: Tue, 28 Mar 2023 12:54:22 GMT Date: Tue, 28 Mar 2023 10:29:58 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: da5340ee69a1000f751686df9e716663 Sha1: a5da880a61ed119790a7990bbdcc0c97eecf04f2 Sha256: d1ff10bfe40f290935abe1feeb975a6af8cf310f9ce9d45bbf482a604da73560
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: AWKkwG1TULSR5VbAxjWFZw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	52.38.211.109 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: nTzeN8WfoxWE2FMLK1TaLNXRBfo= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA" Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14045 Expires: Tue, 28 Mar 2023 14:24:05 GMT Date: Tue, 28 Mar 2023 10:30:00 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: be1cd1cf8e462ca6f6acb2f132e614d5 Sha1: 037f3bc7ab850fa2c69f2584bb24340b25bb6f3c Sha256: e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA" Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14045 Expires: Tue, 28 Mar 2023 14:24:05 GMT Date: Tue, 28 Mar 2023 10:30:00 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: be1cd1cf8e462ca6f6acb2f132e614d5 Sha1: 037f3bc7ab850fa2c69f2584bb24340b25bb6f3c Sha256: e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA" Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14045 Expires: Tue, 28 Mar 2023 14:24:05 GMT Date: Tue, 28 Mar 2023 10:30:00 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: be1cd1cf8e462ca6f6acb2f132e614d5 Sha1: 037f3bc7ab850fa2c69f2584bb24340b25bb6f3c Sha256: e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA" Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14045 Expires: Tue, 28 Mar 2023 14:24:05 GMT Date: Tue, 28 Mar 2023 10:30:00 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: be1cd1cf8e462ca6f6acb2f132e614d5 Sha1: 037f3bc7ab850fa2c69f2584bb24340b25bb6f3c Sha256: e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA" Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14045 Expires: Tue, 28 Mar 2023 14:24:05 GMT Date: Tue, 28 Mar 2023 10:30:00 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: be1cd1cf8e462ca6f6acb2f132e614d5 Sha1: 037f3bc7ab850fa2c69f2584bb24340b25bb6f3c Sha256: e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F858e946a-2e67-4e7b-b78f-763226855b6d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8961 x-amzn-requestid: 9277e35d-8fe8-482e-b65c-b132dfcbd87e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CdbqBGl0IAMFy4w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64220ca6-7869936b33cbf3633c68e7ac;Sampled=0 x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:42 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: niXBcLXb34cBs5-FqU8flhIK5sZ_ykmhwnozGbLigHI3jwXySoF_xw== via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google date: Mon, 27 Mar 2023 21:49:49 GMT age: 45611 etag: "078bd523107096bab5e26d42b18e316c253f1ca7" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8961 Md5: 789f11978a1149984408fbbb9a2b3f81 Sha1: 078bd523107096bab5e26d42b18e316c253f1ca7 Sha256: 7974980290443b64126f512686261150cd27331cb7b32a96d1167a97d046e8a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5556 x-amzn-requestid: 6b050645-14aa-47f7-b4a5-2e27abbe5115 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CM69eHE3IAMF0Yw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641b71ef-6ab2948e2bf2578f29798372;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 21:23:59 GMT x-amz-cf-pop: SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: U1WnpJASpWxPY-8kq-3g3_dKqm5l6UqhA0xUYijO5FDLGAxI2mLthg== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 adc2002956acc4d61bfbf3b973fdf246.cloudfront.net (CloudFront), 1.1 google date: Tue, 28 Mar 2023 05:43:53 GMT age: 17167 etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5556 Md5: c831201ad81f55c63c1b101ce854a810 Sha1: 0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5 Sha256: c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb739a909-c509-4c7a-b5a6-250435d88a54.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10744 x-amzn-requestid: d693d820-7eed-47a3-9b0b-8f43c141bd3a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CdbogF0poAMFTAg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64220c9c-22ab350146e8a3a606f74c42;Sampled=0 x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:32 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: uCaEsILUx4u_fBJ7J9CgQanUW-BmV69mFvGRjZ0roFWluE_joVyVrA== via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google date: Mon, 27 Mar 2023 21:48:21 GMT age: 45699 etag: "5c1ba9bffbcc9007e7f119dbb3197db34a12f8da" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10744 Md5: ada29e049501b12a35b0bcc5f68e3e57 Sha1: 5c1ba9bffbcc9007e7f119dbb3197db34a12f8da Sha256: b45583b5845129386a456e03fbdba25305c8d6d9fb5a8f01d783816ced080629
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b013cb6-ed0b-4590-b333-a69ce6ed3986.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6136 x-amzn-requestid: 5613a97e-2bca-4e20-9ccb-f31c36d95f53 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CdbsjF9_IAMFWMA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64220cb6-0c2c28581024b26c4db3bd1f;Sampled=0 x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:58 GMT x-amz-cf-pop: HIO50-C1, SEA19-C1 x-cache: Miss from cloudfront x-amz-cf-id: GoF8krRMHeKcjTHWhlu7RF2HmmETECJVZrQgEHSeOYwUW3hqxJhQLg== via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 google date: Mon, 27 Mar 2023 22:14:00 GMT etag: "27ac933b8ec68e34144691ecc9c90307b332c5b6" age: 44160 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6136 Md5: 478c720a6e45547c00de24695f491b36 Sha1: 27ac933b8ec68e34144691ecc9c90307b332c5b6 Sha256: eecb9e57f5a92621ca79221094825ae7452616d1cd2e33e8ae96568c3467de3b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fbdd640-8a87-474c-a4d5-f25e31609f46.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9501 x-amzn-requestid: 4c3f56b8-4d4f-4c4d-bd7c-faa15f6cec41 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CdbskGe9IAMFrkQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64220cb6-41acd1d8310ca659548a3039;Sampled=0 x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:58 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Miss from cloudfront x-amz-cf-id: _Mg3EgvJrS5IsmBULM6xZJra0-VkJEEtYlO-RfcE-4eHlghhqU8vdg== via: 1.1 17d76c2aee343249585a570f2d36d2ee.cloudfront.net (CloudFront), 1.1 c9b161639a9353c2354b895548ea9fca.cloudfront.net (CloudFront), 1.1 google date: Mon, 27 Mar 2023 22:06:36 GMT age: 44604 etag: "604a65cfc5572c5da9d3fdea795be3942b8d14cb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9501 Md5: 5d389dd69e54e5d7b547a425f9b22ebf Sha1: 604a65cfc5572c5da9d3fdea795be3942b8d14cb Sha256: 5beda50c5f20633003e1f939673a6005eca314372e7f8fe0a1d4bb5702ae1712
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F178b294b-fb7e-4482-a48e-31bbcc320554.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 20349 x-amzn-requestid: 2de7d242-f277-42a6-9dc4-2fc98207a978 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CdbumFzOIAMF3hA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64220cc3-5f20ad7b2216219138f7b557;Sampled=0 x-amzn-remapped-date: Mon, 27 Mar 2023 21:38:11 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Miss from cloudfront x-amz-cf-id: pnby7LhwZDWxJHtyWBlI7l_AO8l-tjjTVHatiCKG2htZ4RQNQOZkgQ== via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront), 1.1 google date: Mon, 27 Mar 2023 21:48:21 GMT age: 45699 etag: "d76b3958471b2ed70a2b52f078ec638748fdb441" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 20349 Md5: b3e093e7b5c12cfc2aee601f823ea47e Sha1: d76b3958471b2ed70a2b52f078ec638748fdb441 Sha256: de4fc669195611c4ea6fe7d920482987aef077973b4973c01e2f362aeb18c2ea
GET / HTTP/1.1 Host: maglesscrisal.ga User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	195.20.54.124 HTTP/1.1 203 Content-Type: text/html;charset=UTF-8 Server: nginx Date: Tue, 28 Mar 2023 10:30:02 GMT Content-Length: 654 Connection: keep-alive Cache-Control: no-cache Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Server: ip-172-31-14-50 Set-Cookie: JSESSIONID=0115CF02054FB021C6E3E7409F3CE3DC; Path=/; HttpOnly --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 654 Md5: 22f07203e0e0005da3e8b7b6f17f8126 Sha1: 3a6a771a628b6581382b8b9ff1aa6f9b35622baf Sha256: ca61ebda52aaa2c035c823b1785befe48d577d36de2aacb8bbbde89bc80b552f IDS: - ET INFO HTTP Request to a *.ga domain
GET /p/?d=MAGLESSCRISAL.GA&i=91.90.42.154&c=47&ro=0&ref=unknown&_=1679999400879 HTTP/1.1 Host: domain.dot.tk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://maglesscrisal.ga/ Upgrade-Insecure-Requests: 1	88.198.252.121 HTTP/1.0 301 Moved Permanently Content-Type: text/html; charset=ISO-8859-1 Date: Tue, 28 Mar 2023 10:30:55 GMT Server: nginx/1.18.0 Content-Length: 0 Location: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 Connection: close --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 IDS: - ET POLICY HTTP Request to a *.tk domain
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	172.64.155.188 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 28 Mar 2023 10:30:01 GMT Content-Length: 472 Connection: keep-alive Last-Modified: Sat, 25 Mar 2023 16:15:49 GMT Expires: Sat, 01 Apr 2023 16:15:48 GMT Etag: "1b6479ba1716bcd47632786e8ab91944799a2fa4" Cache-Control: max-age=365746,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb1 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7aef320208370afe-OSL --- Additional Info --- Magic: data Size: 472 Md5: ee0ae1c9663838468f842400f771ab43 Sha1: 1b6479ba1716bcd47632786e8ab91944799a2fa4 Sha256: 3c2257e2fa12cf88258f8179270feebe729c227f24848d852391946773717f99
GET /en/pagenotfound.html?_urlfwd=1&_=1679998730 HTTP/1.1 Host: www.freenom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://maglesscrisal.ga/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	35.186.227.193 HTTP/2 200 OK content-type: text/html server: nginx/1.17.8 date: Tue, 28 Mar 2023 10:30:01 GMT content-length: 2928 x-guploader-uploadid: ADPycdsAOvhRy2dVsrl4oIpjGNPfYZte4McR9O6gmG5fpP79agLF6Z_9tIdXJfGhsfhLVDGwxifC3BlaCDqrXZ4ij28eOg cache-control: private, max-age=0, no-transform expires: Tue, 28 Mar 2023 10:30:01 GMT last-modified: Tue, 07 Aug 2018 08:18:30 GMT etag: "7f2a2d857762c4124e2220d7702056e6" x-goog-generation: 1533629910554398 x-goog-metageneration: 43 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 2928 x-goog-meta-goog-reserved-file-mtime: 1533629651 content-language: en x-goog-hash: crc32c=L9bXEQ==, md5=fyothXdixBJOIiDXcCBW5g== x-goog-storage-class: STANDARD accept-ranges: bytes via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 2928 Md5: 7f2a2d857762c4124e2220d7702056e6 Sha1: 6cb83718fea1ccc8ed46cae7d90285de58734033 Sha256: 1678ca6933c124b44fe8e816ffb134a299cf551412c46732e0f9994c2de9652e
GET /css/font-awesome.min.css HTTP/1.1 Host: www.freenom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	35.186.227.193 HTTP/2 200 OK content-type: text/css server: nginx/1.17.8 date: Tue, 28 Mar 2023 10:30:01 GMT content-length: 26689 x-guploader-uploadid: ADPycdvdLABrj-nnKAAJH_0sn4iQ1WKYY0AFH79swCIgHlwg5R1_I3NAANpCps6kqoSOdwAlVEuQrux6tvFzTuaLNbzgFQ cache-control: private, max-age=0, no-transform expires: Tue, 28 Mar 2023 10:30:01 GMT last-modified: Thu, 24 Mar 2016 21:03:51 GMT etag: "895edde9f15b1bb00acd7f3e7a6e25ee" x-goog-generation: 1458853431597000 x-goog-metageneration: 68 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 26689 x-goog-meta-goog-reserved-file-mtime: 1467283521 x-goog-hash: crc32c=KEIgNw==, md5=iV7d6fFbG7AKzX8+em4l7g== x-goog-storage-class: STANDARD accept-ranges: bytes via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (26524), with CRLF line terminators Size: 26689 Md5: 895edde9f15b1bb00acd7f3e7a6e25ee Sha1: 8407f9aa4d39f3edda9f54b0e30225385d2f8b20 Sha256: 8ce35e7c8f6fb1f1a1cd07dbe5a7edc19d858ebfe8dbe6a04013236d5176c58a
GET /css/reset.css HTTP/1.1 Host: www.freenom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	35.186.227.193 HTTP/2 200 OK content-type: text/css server: nginx/1.17.8 date: Tue, 28 Mar 2023 10:30:01 GMT content-length: 795 x-guploader-uploadid: ADPycdvkT-UlbW39PmPYY8Zh9PPOPgSY9OzYHOUC6tjpoF4s6jhq3q5vQZOoOtyMylKVa5hIO13gKpA_M27WE1GWVhwdJg cache-control: private, max-age=0, no-transform expires: Tue, 28 Mar 2023 10:30:01 GMT last-modified: Thu, 22 Sep 2016 11:56:14 GMT etag: "182a9e59cb2d502fa68a9bb9e30e5ad8" x-goog-generation: 1474545374458000 x-goog-metageneration: 58 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 795 x-goog-meta-goog-reserved-file-mtime: 1474545367 content-language: en x-goog-hash: crc32c=n0/UNQ==, md5=GCqeWcstUC+mipu54w5a2A== x-goog-storage-class: STANDARD accept-ranges: bytes via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (738), with CRLF line terminators Size: 795 Md5: 182a9e59cb2d502fa68a9bb9e30e5ad8 Sha1: f6a54c21086d495f2687e4a5fff3f1f59a8be8ad Sha256: ec34f5f4278bcc95f8e963777380ce5a20697dc357ae00c7f4f4c77468b5dba5
GET /js/jquery.easing.min.js HTTP/1.1 Host: www.freenom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	35.186.227.193 HTTP/2 200 OK content-type: application/javascript server: nginx/1.17.8 date: Tue, 28 Mar 2023 10:30:01 GMT content-length: 7046 x-guploader-uploadid: ADPycdvMpr700nlQuDeHCLXrVrjHu1PeMfmsT8TlXMG2IN34O3newfPM7ZGS9JRBWJZKxop-BEnPoHeXSFYKXod3NumCSA cache-control: private, max-age=0, no-transform expires: Tue, 28 Mar 2023 10:30:01 GMT last-modified: Thu, 24 Mar 2016 21:04:33 GMT etag: "ec64dc8377266f617caf00ebc5067a14" x-goog-generation: 1458853473712000 x-goog-metageneration: 76 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 7046 x-goog-meta-goog-reserved-file-mtime: 1467283509 x-goog-hash: crc32c=924SHw==, md5=7GTcg3cmb2F8rwDrxQZ6FA== x-goog-storage-class: STANDARD accept-ranges: bytes via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ISO-8859 text, with very long lines (3601) Size: 7046 Md5: ec64dc8377266f617caf00ebc5067a14 Sha1: fb6ebf42d2da04eee38b8fabc0c09dd9e433a9e4 Sha256: a7c016be6c9693535e2a8abce5814c71290f76bb8259e907dfa092f3c3633447
GET /js/jquery.rotating.backgrounds.js HTTP/1.1 Host: www.freenom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	35.186.227.193 HTTP/2 200 OK content-type: application/javascript server: nginx/1.17.8 date: Tue, 28 Mar 2023 10:30:01 GMT content-length: 979 x-guploader-uploadid: ADPycdvi4o9CBGlpLLjWMCWVINjm749lRiHeONYdPrldyOtb3b5bL1_uqvuZV0dmPibLyCRh3kC1T1oE0XM8D27xlt30wg cache-control: private, max-age=0, no-transform expires: Tue, 28 Mar 2023 10:30:01 GMT last-modified: Thu, 22 Sep 2016 11:56:18 GMT etag: "8d685417c25ae3822c63b489b79575ab" x-goog-generation: 1474545378683000 x-goog-metageneration: 66 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 979 x-goog-meta-goog-reserved-file-mtime: 1474545366 content-language: en x-goog-hash: crc32c=r2XZGA==, md5=jWhUF8Ja44IsY7SJt5V1qw== x-goog-storage-class: STANDARD accept-ranges: bytes via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 979 Md5: 8d685417c25ae3822c63b489b79575ab Sha1: dbfd3c26dc80d96c96c0b8fd97c176cf839631e3 Sha256: b057931915715d603c8d72986402da1ff6e77c669b46326400cc32de8a6f1a28
GET /css/freenom.min.css HTTP/1.1 Host: www.freenom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	35.186.227.193 HTTP/2 200 OK content-type: text/css server: nginx/1.17.8 date: Tue, 28 Mar 2023 10:30:01 GMT content-length: 52912 x-guploader-uploadid: ADPycdsEO1L2Mr5tSlhMTlKmmKvlybf2SiKOp1h3c0UgQSZBHq5tg2DQSmFTJgZE4KsvhRduc_LQhb2nnyNs4ZARgFfKIw cache-control: private, max-age=0, no-transform expires: Tue, 28 Mar 2023 10:30:01 GMT last-modified: Thu, 22 Sep 2016 11:56:14 GMT etag: "12e8524e0e1cd523b89348f06dc07b09" x-goog-generation: 1474545375012000 x-goog-metageneration: 58 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 52912 x-goog-meta-goog-reserved-file-mtime: 1474545367 content-language: en x-goog-hash: crc32c=CfVXUA==, md5=EuhSTg4c1SO4k0jwbcB7CQ== x-goog-storage-class: STANDARD accept-ranges: bytes via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text, with very long lines (396), with CRLF line terminators Size: 52912 Md5: 12e8524e0e1cd523b89348f06dc07b09 Sha1: ce46989028dd0a2759ad511229d470664cccd264 Sha256: c390bac6e59b3fb9cb4b9ac6141fb422c5c31a0afcf04fc0185d22be344aa4b8
GET /images.v2/logo.png HTTP/1.1 Host: www.freenom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	35.186.227.193 HTTP/2 200 OK content-type: image/png server: nginx/1.17.8 date: Tue, 28 Mar 2023 10:30:01 GMT content-length: 12407 x-guploader-uploadid: ADPycdsTklJhGWfGqHz5CEMJqmOfCTXr4ikPoY0CUyT9ea-NmurKa5tKpJQOXFmQfAXrtpN0cDieM--PMDV796msY0pW8Q cache-control: private, max-age=0, no-transform expires: Tue, 28 Mar 2023 10:30:01 GMT last-modified: Thu, 24 Mar 2016 21:04:18 GMT etag: "0d15ea0d66606463554b67000d2bf00b" x-goog-generation: 1458853458625000 x-goog-metageneration: 68 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 12407 x-goog-meta-goog-reserved-file-mtime: 1467283538 x-goog-hash: crc32c=qci8jQ==, md5=DRXqDWZgZGNVS2cADSvwCw== x-goog-storage-class: STANDARD accept-ranges: bytes via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 344 x 84, 8-bit/color RGBA, non-interlaced\012- data Size: 12407 Md5: 0d15ea0d66606463554b67000d2bf00b Sha1: 1a2982d69bf466bf506cf6e3958aeb116c5380e8 Sha256: 8f5f28a19f79671426814c76e3b17cbc3d1b1e6346dbdf7905b1a516d314d5ad
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 28 Mar 2023 10:30:01 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: d2d4415f4eeb34e663d209eeddd8d25d Sha1: 5d239718d7235d1f62e10d7d381c5a063e94c73a Sha256: cc35be0a21b7442cc2628ea8cd42023f81eb2deea66e5149a22776228b105213
GET /css/style-2015.css HTTP/1.1 Host: www.freenom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	35.186.227.193 HTTP/2 200 OK content-type: text/css server: nginx/1.17.8 date: Tue, 28 Mar 2023 10:30:01 GMT content-length: 36772 x-guploader-uploadid: ADPycdsSRBQRbEK1S3ciXsNtYZ8QSSfJRMNC5DNp2-bwQzvOPAX4WKwIUYzEcka-G3BLqmci2h3tsgMKYdJbeL0xRB7lZQ cache-control: private, max-age=0, no-transform expires: Tue, 28 Mar 2023 10:30:01 GMT last-modified: Thu, 01 Sep 2016 13:39:19 GMT etag: "7f167f69f709956a16a4dbde38036b9b" x-goog-generation: 1472737159446000 x-goog-metageneration: 67 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 36772 x-goog-meta-goog-reserved-file-mtime: 1472737150 content-language: en x-goog-hash: crc32c=zyW2Rg==, md5=fxZ/afcJlWoWpNveOANrmw== x-goog-storage-class: STANDARD accept-ranges: bytes via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: assembler source, ASCII text, with CRLF line terminators Size: 36772 Md5: 7f167f69f709956a16a4dbde38036b9b Sha1: d1a60a8bd0f3a005ad9d616cc3a2d5fb064a8eec Sha256: b96fdf74eddef1994a12a884d6aaa2a80d7f0f2111e30aa6d303681463bd8cad
GET /ajax/libs/jquery/2.0.3/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.freenom.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	216.58.207.234 HTTP/2 200 OK content-type: text/javascript; charset=UTF-8 accept-ranges: bytes content-encoding: gzip access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} timing-allow-origin: * content-length: 29440 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Wed, 22 Mar 2023 18:05:11 GMT expires: Thu, 21 Mar 2024 18:05:11 GMT cache-control: public, max-age=31536000, stale-while-revalidate=2592000 last-modified: Tue, 03 Mar 2020 19:15:00 GMT vary: Accept-Encoding age: 491090 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (32023) Size: 29440 Md5: 8b4eef92298453e0536f38127ed3dd35 Sha1: e778ceb9964d0035f688bb1d8c3c30b36e90e261 Sha256: 2f6d9e04250c84e0541a29cb66bc978dc128edc99e187d4a2642fc64fb1050e4
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 28 Mar 2023 10:30:01 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: d2d4415f4eeb34e663d209eeddd8d25d Sha1: 5d239718d7235d1f62e10d7d381c5a063e94c73a Sha256: cc35be0a21b7442cc2628ea8cd42023f81eb2deea66e5149a22776228b105213
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	172.64.155.188 HTTP/1.1 502 Bad Gateway Content-Type: text/html; charset=UTF-8 Date: Tue, 28 Mar 2023 10:30:01 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: cf_use_ob=0; path=/; expires=Tue, 28-Mar-23 10:30:31 GMT X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT CF-RAY: 7aef3203ca3fb4f9-OSL Server: cloudflare --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (394) Size: 6409 Md5: 724658de6aa980fda0817a3caf6a9b0d Sha1: ad4ed1c53fcd993f0f0e431a4115f36332c5abfd Sha256: 4058dca03899da60e4f3cc122018924f1bac83fe6c7c77dd3944d97648c1f07d
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	172.64.155.188 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 28 Mar 2023 10:30:01 GMT Content-Length: 472 Connection: keep-alive Last-Modified: Sat, 25 Mar 2023 16:15:49 GMT Expires: Sat, 01 Apr 2023 16:15:48 GMT Etag: "1b6479ba1716bcd47632786e8ab91944799a2fa4" Cache-Control: max-age=365746,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb4 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7aef3202e8ff0afe-OSL --- Additional Info --- Magic: data Size: 472 Md5: ee0ae1c9663838468f842400f771ab43 Sha1: 1b6479ba1716bcd47632786e8ab91944799a2fa4 Sha256: 3c2257e2fa12cf88258f8179270feebe729c227f24848d852391946773717f99
GET /js/login.js HTTP/1.1 Host: register.freenom.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.freenom.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site	104.155.8.167 HTTP/1.1 200 OK Content-Type: application/x-javascript Server: nginx/1.14.2 Date: Tue, 28 Mar 2023 10:30:01 GMT Content-Length: 948 Connection: keep-alive Last-Modified: Tue, 02 Sep 2014 09:21:44 GMT ETag: "ec5b6-3b4-54058c28" Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with very long lines (948), with no line terminators Size: 948 Md5: 98236fa777091f2ca39919f59bc0b637 Sha1: e212fc0877d911b499d1937d2d4e4c47898d1884 Sha256: 1de89c9d7f8cfadcf197686751cbe5ee65c4d75762447f9999b1b003a45e8b6d
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 28 Mar 2023 10:30:01 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 7e2d8156baac12231cc9cbfdefedacf1 Sha1: 62384d8842fb5b560ac39636bb519953e22dc664 Sha256: ee4dbd79fc1569ab6ae0ea7b90b4b7d8dbb846296cf7fc68b24be78b7b95993b
GET /analytics.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.freenom.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	216.58.207.206 HTTP/2 200 OK content-type: text/javascript strict-transport-security: max-age=10886400; includeSubDomains; preload x-content-type-options: nosniff content-encoding: gzip cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 20085 date: Tue, 28 Mar 2023 10:05:11 GMT expires: Tue, 28 Mar 2023 12:05:11 GMT cache-control: public, max-age=7200 age: 1490 last-modified: Tue, 10 Jan 2023 21:29:14 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1490) Size: 20085 Md5: ca7fbbfd120e3e329633044190bbf134 Sha1: d17f81e03dd827554ddd207ea081fb46b3415445 Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 28 Mar 2023 10:30:01 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 7e2d8156baac12231cc9cbfdefedacf1 Sha1: 62384d8842fb5b560ac39636bb519953e22dc664 Sha256: ee4dbd79fc1569ab6ae0ea7b90b4b7d8dbb846296cf7fc68b24be78b7b95993b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34000367-9577-4c81-bbc7-d968f62c4ef2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8438 x-amzn-requestid: db3a5404-7161-4c9f-952a-4109ffd62491 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CaINiHCdoAMFn0w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6420ba56-05338fff3f562aad31c7c027;Sampled=0 x-amzn-remapped-date: Sun, 26 Mar 2023 21:34:14 GMT x-amz-cf-pop: SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: mNjK5YwJbwmAwA6WszDkyUgiHY3Bd9FJQdkybyo9aEO_JKV9FwRpkg== via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 google date: Tue, 28 Mar 2023 05:55:54 GMT age: 16452 etag: "1a6063b2bad22f23ef33c123a16ab035515e95db" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8438 Md5: b0f3e3c4584dcf7b158236bf4dce164c Sha1: 1a6063b2bad22f23ef33c123a16ab035515e95db Sha256: e0fe6112bdc39de23384f4a8782fc72df9577448555d1634fcd5fe34e6cf492f

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "0FF6DF80A892199848FB943AF78541B66EFC09A7AB70D4B169906FDBAC1EABF8" 

                                            
                                                
Last-Modified: Mon, 27 Mar 2023 14:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=6157 

                                            
                                                
Expires: Tue, 28 Mar 2023 12:12:34 GMT 

                                            
                                                
Date: Tue, 28 Mar 2023 10:29:57 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    93f633ce30c038eb581544323c5a971e

                                                Sha1:   2f60526cb750c6babccc207f75fb5a8ae6f7598b

                                                Sha256: 0ff6df80a892199848fb943af78541b66efc09a7ab70d4b169906fdbac1eabf8

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: Content-Type, Content-Length, Backoff, Alert, Retry-After 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 939 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Tue, 28 Mar 2023 10:28:01 GMT 

                                            
                                                
age: 116 

                                            
                                                
cache-control: max-age=3600,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    ed282214b024a7895d90e229e92bb1cc

                                                Sha1:   1f447aa59287ce2b45860a1a909d005a41305f77

                                                Sha256: a35ae9f89cbc77ed5fe849acdc2701592799c335f2674776d69c25bca0a00c2e

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: binary/octet-stream

                                            

                                            
                                                
x-amz-id-2: GT56j5lsCJhMcXhoVwJJZ/CC7yh6WAPkvgut8SDP9AtCKQRsIl3QXsHHnjoTdZHzlOM4QtnzhEc= 

                                            
                                                
x-amz-request-id: PDG9Z617P5KCK9ZF 

                                            
                                                
x-amz-server-side-encryption: AES256 

                                            
                                                
content-disposition: attachment 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
server: AmazonS3 

                                            
                                                
content-length: 5348 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Tue, 28 Mar 2023 09:56:10 GMT 

                                            
                                                
age: 2027 

                                            
                                                
last-modified: Sat, 11 Mar 2023 16:53:15 GMT 

                                            
                                                
etag: "e7bace7c1e04d44012e37ddffe36e5d5" 

                                            
                                                
cache-control: public,max-age=3600 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    e7bace7c1e04d44012e37ddffe36e5d5

                                                Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2

                                                Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: Pragma, Content-Type, Content-Length, Backoff, Alert, ETag, Last-Modified, Expires, Retry-After, Cache-Control 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 329 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Tue, 28 Mar 2023 10:14:35 GMT 

                                            
                                                
age: 923 

                                            
                                                
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                            
                                                
etag: "1648230346554" 

                                            
                                                
cache-control: max-age=3600,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: AWKkwG1TULSR5VbAxjWFZw== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                        
                                             52.38.211.109

                                            
                                                HTTP/1.1 101 Switching Protocols

                                            

                                            
                                                
Connection: Upgrade 

                                            
                                                
Upgrade: websocket 

                                            
                                                
Sec-WebSocket-Accept: nTzeN8WfoxWE2FMLK1TaLNXRBfo= 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA" 

                                            
                                                
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=14045 

                                            
                                                
Expires: Tue, 28 Mar 2023 14:24:05 GMT 

                                            
                                                
Date: Tue, 28 Mar 2023 10:30:00 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    be1cd1cf8e462ca6f6acb2f132e614d5

                                                Sha1:   037f3bc7ab850fa2c69f2584bb24340b25bb6f3c

                                                Sha256: e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.77.32

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA" 

                                            
                                                
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=14045 

                                            
                                                
Expires: Tue, 28 Mar 2023 14:24:05 GMT 

                                            
                                                
Date: Tue, 28 Mar 2023 10:30:00 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    be1cd1cf8e462ca6f6acb2f132e614d5

                                                Sha1:   037f3bc7ab850fa2c69f2584bb24340b25bb6f3c

                                                Sha256: e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F858e946a-2e67-4e7b-b78f-763226855b6d.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8961 

                                            
                                                
x-amzn-requestid: 9277e35d-8fe8-482e-b65c-b132dfcbd87e 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: CdbqBGl0IAMFy4w= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-64220ca6-7869936b33cbf3633c68e7ac;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:42 GMT 

                                            
                                                
x-amz-cf-pop: HIO52-P1, SEA19-C1 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: niXBcLXb34cBs5-FqU8flhIK5sZ_ykmhwnozGbLigHI3jwXySoF_xw== 

                                            
                                                
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 27 Mar 2023 21:49:49 GMT 

                                            
                                                
age: 45611 

                                            
                                                
etag: "078bd523107096bab5e26d42b18e316c253f1ca7" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8961

                                                Md5:    789f11978a1149984408fbbb9a2b3f81

                                                Sha1:   078bd523107096bab5e26d42b18e316c253f1ca7

                                                Sha256: 7974980290443b64126f512686261150cd27331cb7b32a96d1167a97d046e8a3

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb739a909-c509-4c7a-b5a6-250435d88a54.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 10744 

                                            
                                                
x-amzn-requestid: d693d820-7eed-47a3-9b0b-8f43c141bd3a 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: CdbogF0poAMFTAg= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-64220c9c-22ab350146e8a3a606f74c42;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:32 GMT 

                                            
                                                
x-amz-cf-pop: HIO52-P1, SEA19-C1 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: uCaEsILUx4u_fBJ7J9CgQanUW-BmV69mFvGRjZ0roFWluE_joVyVrA== 

                                            
                                                
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 27 Mar 2023 21:48:21 GMT 

                                            
                                                
age: 45699 

                                            
                                                
etag: "5c1ba9bffbcc9007e7f119dbb3197db34a12f8da" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10744

                                                Md5:    ada29e049501b12a35b0bcc5f68e3e57

                                                Sha1:   5c1ba9bffbcc9007e7f119dbb3197db34a12f8da

                                                Sha256: b45583b5845129386a456e03fbdba25305c8d6d9fb5a8f01d783816ced080629

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fbdd640-8a87-474c-a4d5-f25e31609f46.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 9501 

                                            
                                                
x-amzn-requestid: 4c3f56b8-4d4f-4c4d-bd7c-faa15f6cec41 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: CdbskGe9IAMFrkQ= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-64220cb6-41acd1d8310ca659548a3039;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:58 GMT 

                                            
                                                
x-amz-cf-pop: HIO52-P1, SEA19-C1 

                                            
                                                
x-cache: Miss from cloudfront 

                                            
                                                
x-amz-cf-id: _Mg3EgvJrS5IsmBULM6xZJra0-VkJEEtYlO-RfcE-4eHlghhqU8vdg== 

                                            
                                                
via: 1.1 17d76c2aee343249585a570f2d36d2ee.cloudfront.net (CloudFront), 1.1 c9b161639a9353c2354b895548ea9fca.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 27 Mar 2023 22:06:36 GMT 

                                            
                                                
age: 44604 

                                            
                                                
etag: "604a65cfc5572c5da9d3fdea795be3942b8d14cb" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9501

                                                Md5:    5d389dd69e54e5d7b547a425f9b22ebf

                                                Sha1:   604a65cfc5572c5da9d3fdea795be3942b8d14cb

                                                Sha256: 5beda50c5f20633003e1f939673a6005eca314372e7f8fe0a1d4bb5702ae1712

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sectigo.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             172.64.155.188

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Tue, 28 Mar 2023 10:30:01 GMT 

                                            
                                                
Content-Length: 472 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Last-Modified: Sat, 25 Mar 2023 16:15:49 GMT 

                                            
                                                
Expires: Sat, 01 Apr 2023 16:15:48 GMT 

                                            
                                                
Etag: "1b6479ba1716bcd47632786e8ab91944799a2fa4" 

                                            
                                                
Cache-Control: max-age=365746,s-maxage=1800,public,no-transform,must-revalidate 

                                            
                                                
X-CCACDN-Proxy-ID: mcdpinlb1 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
CF-Cache-Status: DYNAMIC 

                                            
                                                
Server: cloudflare 

                                            
                                                
CF-RAY: 7aef320208370afe-OSL 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    ee0ae1c9663838468f842400f771ab43

                                                Sha1:   1b6479ba1716bcd47632786e8ab91944799a2fa4

                                                Sha256: 3c2257e2fa12cf88258f8179270feebe729c227f24848d852391946773717f99

                                        
                                            GET /css/font-awesome.min.css HTTP/1.1 

                                        
                                            
Host: www.freenom.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             35.186.227.193

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/css

                                            

                                            
                                                
server: nginx/1.17.8 

                                            
                                                
date: Tue, 28 Mar 2023 10:30:01 GMT 

                                            
                                                
content-length: 26689 

                                            
                                                
x-guploader-uploadid: ADPycdvdLABrj-nnKAAJH_0sn4iQ1WKYY0AFH79swCIgHlwg5R1_I3NAANpCps6kqoSOdwAlVEuQrux6tvFzTuaLNbzgFQ 

                                            
                                                
cache-control: private, max-age=0, no-transform 

                                            
                                                
expires: Tue, 28 Mar 2023 10:30:01 GMT 

                                            
                                                
last-modified: Thu, 24 Mar 2016 21:03:51 GMT 

                                            
                                                
etag: "895edde9f15b1bb00acd7f3e7a6e25ee" 

                                            
                                                
x-goog-generation: 1458853431597000 

                                            
                                                
x-goog-metageneration: 68 

                                            
                                                
x-goog-stored-content-encoding: identity 

                                            
                                                
x-goog-stored-content-length: 26689 

                                            
                                                
x-goog-meta-goog-reserved-file-mtime: 1467283521 

                                            
                                                
x-goog-hash: crc32c=KEIgNw==, md5=iV7d6fFbG7AKzX8+em4l7g== 

                                            
                                                
x-goog-storage-class: STANDARD 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
via: 1.1 google 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (26524), with CRLF line terminators

                                                Size:   26689

                                                Md5:    895edde9f15b1bb00acd7f3e7a6e25ee

                                                Sha1:   8407f9aa4d39f3edda9f54b0e30225385d2f8b20

                                                Sha256: 8ce35e7c8f6fb1f1a1cd07dbe5a7edc19d858ebfe8dbe6a04013236d5176c58a

                                        
                                            GET /js/jquery.easing.min.js HTTP/1.1 

                                        
                                            
Host: www.freenom.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             35.186.227.193

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/javascript

                                            

                                            
                                                
server: nginx/1.17.8 

                                            
                                                
date: Tue, 28 Mar 2023 10:30:01 GMT 

                                            
                                                
content-length: 7046 

                                            
                                                
x-guploader-uploadid: ADPycdvMpr700nlQuDeHCLXrVrjHu1PeMfmsT8TlXMG2IN34O3newfPM7ZGS9JRBWJZKxop-BEnPoHeXSFYKXod3NumCSA 

                                            
                                                
cache-control: private, max-age=0, no-transform 

                                            
                                                
expires: Tue, 28 Mar 2023 10:30:01 GMT 

                                            
                                                
last-modified: Thu, 24 Mar 2016 21:04:33 GMT 

                                            
                                                
etag: "ec64dc8377266f617caf00ebc5067a14" 

                                            
                                                
x-goog-generation: 1458853473712000 

                                            
                                                
x-goog-metageneration: 76 

                                            
                                                
x-goog-stored-content-encoding: identity 

                                            
                                                
x-goog-stored-content-length: 7046 

                                            
                                                
x-goog-meta-goog-reserved-file-mtime: 1467283509 

                                            
                                                
x-goog-hash: crc32c=924SHw==, md5=7GTcg3cmb2F8rwDrxQZ6FA== 

                                            
                                                
x-goog-storage-class: STANDARD 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
via: 1.1 google 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ISO-8859 text, with very long lines (3601)

                                                Size:   7046

                                                Md5:    ec64dc8377266f617caf00ebc5067a14

                                                Sha1:   fb6ebf42d2da04eee38b8fabc0c09dd9e433a9e4

                                                Sha256: a7c016be6c9693535e2a8abce5814c71290f76bb8259e907dfa092f3c3633447

                                        
                                            GET /css/freenom.min.css HTTP/1.1 

                                        
                                            
Host: www.freenom.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.freenom.com/en/pagenotfound.html?_urlfwd=1&_=1679998730 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             35.186.227.193

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/css

                                            

                                            
                                                
server: nginx/1.17.8 

                                            
                                                
date: Tue, 28 Mar 2023 10:30:01 GMT 

                                            
                                                
content-length: 52912 

                                            
                                                
x-guploader-uploadid: ADPycdsEO1L2Mr5tSlhMTlKmmKvlybf2SiKOp1h3c0UgQSZBHq5tg2DQSmFTJgZE4KsvhRduc_LQhb2nnyNs4ZARgFfKIw 

                                            
                                                
cache-control: private, max-age=0, no-transform 

                                            
                                                
expires: Tue, 28 Mar 2023 10:30:01 GMT 

                                            
                                                
last-modified: Thu, 22 Sep 2016 11:56:14 GMT 

                                            
                                                
etag: "12e8524e0e1cd523b89348f06dc07b09" 

                                            
                                                
x-goog-generation: 1474545375012000 

                                            
                                                
x-goog-metageneration: 58 

                                            
                                                
x-goog-stored-content-encoding: identity 

                                            
                                                
x-goog-stored-content-length: 52912 

                                            
                                                
x-goog-meta-goog-reserved-file-mtime: 1474545367 

                                            
                                                
content-language: en 

                                            
                                                
x-goog-hash: crc32c=CfVXUA==, md5=EuhSTg4c1SO4k0jwbcB7CQ== 

                                            
                                                
x-goog-storage-class: STANDARD 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
via: 1.1 google 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  Unicode text, UTF-8 text, with very long lines (396), with CRLF line terminators

                                                Size:   52912

                                                Md5:    12e8524e0e1cd523b89348f06dc07b09

                                                Sha1:   ce46989028dd0a2759ad511229d470664cccd264

                                                Sha256: c390bac6e59b3fb9cb4b9ac6141fb422c5c31a0afcf04fc0185d22be344aa4b8

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.131

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Tue, 28 Mar 2023 10:30:01 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 471 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    d2d4415f4eeb34e663d209eeddd8d25d

                                                Sha1:   5d239718d7235d1f62e10d7d381c5a063e94c73a

                                                Sha256: cc35be0a21b7442cc2628ea8cd42023f81eb2deea66e5149a22776228b105213

                                        
                                            GET /ajax/libs/jquery/2.0.3/jquery.min.js HTTP/1.1 

                                        
                                            
Host: ajax.googleapis.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.freenom.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.234

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/javascript; charset=UTF-8

                                            

                                            
                                                
accept-ranges: bytes 

                                            
                                                
content-encoding: gzip 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" 

                                            
                                                
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
content-length: 29440 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
server: sffe 

                                            
                                                
x-xss-protection: 0 

                                            
                                                
date: Wed, 22 Mar 2023 18:05:11 GMT 

                                            
                                                
expires: Thu, 21 Mar 2024 18:05:11 GMT 

                                            
                                                
cache-control: public, max-age=31536000, stale-while-revalidate=2592000 

                                            
                                                
last-modified: Tue, 03 Mar 2020 19:15:00 GMT 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
age: 491090 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (32023)

                                                Size:   29440

                                                Md5:    8b4eef92298453e0536f38127ed3dd35

                                                Sha1:   e778ceb9964d0035f688bb1d8c3c30b36e90e261

                                                Sha256: 2f6d9e04250c84e0541a29cb66bc978dc128edc99e187d4a2642fc64fb1050e4

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sectigo.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             172.64.155.188

                                            
                                                HTTP/1.1 502 Bad Gateway 

                                            
                                                
Content-Type: text/html; charset=UTF-8

                                            

                                            
                                                
Date: Tue, 28 Mar 2023 10:30:01 GMT 

                                            
                                                
Transfer-Encoding: chunked 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Set-Cookie: cf_use_ob=0; path=/; expires=Tue, 28-Mar-23 10:30:31 GMT 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
Referrer-Policy: same-origin 

                                            
                                                
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 

                                            
                                                
Expires: Thu, 01 Jan 1970 00:00:01 GMT 

                                            
                                                
CF-RAY: 7aef3203ca3fb4f9-OSL 

                                            
                                                
Server: cloudflare 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (394)

                                                Size:   6409

                                                Md5:    724658de6aa980fda0817a3caf6a9b0d

                                                Sha1:   ad4ed1c53fcd993f0f0e431a4115f36332c5abfd

                                                Sha256: 4058dca03899da60e4f3cc122018924f1bac83fe6c7c77dd3944d97648c1f07d

                                        
                                            GET /js/login.js HTTP/1.1 

                                        
                                            
Host: register.freenom.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.freenom.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-site

                                        
                                             104.155.8.167

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/x-javascript

                                            

                                            
                                                
Server: nginx/1.14.2 

                                            
                                                
Date: Tue, 28 Mar 2023 10:30:01 GMT 

                                            
                                                
Content-Length: 948 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Last-Modified: Tue, 02 Sep 2014 09:21:44 GMT 

                                            
                                                
ETag: "ec5b6-3b4-54058c28" 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (948), with no line terminators

                                                Size:   948

                                                Md5:    98236fa777091f2ca39919f59bc0b637

                                                Sha1:   e212fc0877d911b499d1937d2d4e4c47898d1884

                                                Sha256: 1de89c9d7f8cfadcf197686751cbe5ee65c4d75762447f9999b1b003a45e8b6d

                                        
                                            GET /analytics.js HTTP/1.1 

                                        
                                            
Host: www.google-analytics.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.freenom.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.206

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/javascript

                                            

                                            
                                                
strict-transport-security: max-age=10886400; includeSubDomains; preload 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-encoding: gzip 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
server: Golfe2 

                                            
                                                
content-length: 20085 

                                            
                                                
date: Tue, 28 Mar 2023 10:05:11 GMT 

                                            
                                                
expires: Tue, 28 Mar 2023 12:05:11 GMT 

                                            
                                                
cache-control: public, max-age=7200 

                                            
                                                
age: 1490 

                                            
                                                
last-modified: Tue, 10 Jan 2023 21:29:14 GMT 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (1490)

                                                Size:   20085

                                                Md5:    ca7fbbfd120e3e329633044190bbf134

                                                Sha1:   d17f81e03dd827554ddd207ea081fb46b3415445

                                                Sha256: 847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34000367-9577-4c81-bbc7-d968f62c4ef2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8438 

                                            
                                                
x-amzn-requestid: db3a5404-7161-4c9f-952a-4109ffd62491 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: CaINiHCdoAMFn0w= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-6420ba56-05338fff3f562aad31c7c027;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Sun, 26 Mar 2023 21:34:14 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C1 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: mNjK5YwJbwmAwA6WszDkyUgiHY3Bd9FJQdkybyo9aEO_JKV9FwRpkg== 

                                            
                                                
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Tue, 28 Mar 2023 05:55:54 GMT 

                                            
                                                
age: 16452 

                                            
                                                
etag: "1a6063b2bad22f23ef33c123a16ab035515e95db" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8438

                                                Md5:    b0f3e3c4584dcf7b158236bf4dce164c

                                                Sha1:   1a6063b2bad22f23ef33c123a16ab035515e95db

                                                Sha256: e0fe6112bdc39de23384f4a8782fc72df9577448555d1634fcd5fe34e6cf492f

URL	maglesscrisal.ga/
IP	195.20.54.124 (Netherlands)
ASN	#31624 Verotel International B.V.
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access	public
Report completed	2023-03-28 10:30:09 UTC
Status	Loading report..
IDS alerts	5
Blocklist alert	0
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (14)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 195.20.54.124

Last 5 reports on ASN: Verotel International B.V.

Last 1 reports on domain: maglesscrisal.ga

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (41)

Overview

Domain Summary (14)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 195.20.54.124

Last 5 reports on ASN: Verotel International B.V.

Last 1 reports on domain: maglesscrisal.ga

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (41)

Network Intrusion Detection Systems