www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
50.116.16.203200 OK 7.6 kB URL HTTP/1.1 www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
IP 50.116.16.203:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (328), with CRLF line terminators
Hash d7fd38d9217abce50e0e97e03e818da9
a5b2bb8c8843411bfdf62cb1d6f075cede8dd67a
373b6e5f8271687bb14eeee306922aa3bfbaf28bf263f0c2ffb59a504c4207e8
Analyzer Verdict Alert openphish Fifth Third Bank
quad9 Sinkholed
GET /login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0 HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:16 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6248
Expires: Thu, 08 Sep 2022 07:55:24 GMT
Date: Thu, 08 Sep 2022 06:11:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 08 Sep 2022 05:38:02 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RXCbYPnGmFpANK4PCf3jTHiDGkAJRXY5HFfFA7oFyUmaI2A1u3SJgA==
Age: 1994
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.35200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.35:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qKxQDnV3hIX9KgQOU7rRqaDmbKMnSxmifPEtjw7qCYi3Uxekk_Fqow==
age: 8682
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 06:11:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash db433121f8c8215d44bcd26aff290172
f96b386796e3589437cd57fac6782842c17ce746
455323a3f807014a498118929131b6aad4ec5283f95be23108b2afd329576098
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 06:11:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.74200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP 142.250.74.74:0
File type ASCII text, with very long lines (32065)
Hash 6d973c8b7e2439d958e09c0a1ab9fe50
05ae0830200c20b9a2dfd5a825adc400481a60fb
f3c122dc227e829ed96b2a754296809201bd78abbad7ba50ef5079654e1cc894
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 21:06:53 GMT
expires: Thu, 07 Sep 2023 21:06:53 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 32663
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash db433121f8c8215d44bcd26aff290172
f96b386796e3589437cd57fac6782842c17ce746
455323a3f807014a498118929131b6aad4ec5283f95be23108b2afd329576098
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 06:11:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.secure53rd734.dubya.net/images/b9.png
50.116.16.203200 OK 554 B URL HTTP/1.1 www.secure53rd734.dubya.net/images/b9.png
IP 50.116.16.203:0
File type PNG image data, 39 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash b690340b05f4db1136533ed54115404d
67243c32be377ee948475f6ba18c19e6c512ecca
278b6c885842b54a55d312510aab32d986a8fdbef1b606604b2323d2dfedfea7
Analyzer Verdict Alert quad9 Sinkholed
GET /images/b9.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:16 GMT
Server: Apache
Last-Modified: Sun, 29 Jul 2018 21:53:36 GMT
Accept-Ranges: bytes
Content-Length: 554
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 367a92e308b25781c245d77043c54a87
49a1e996384865b200d1a372d413bd2320a55f5d
fd1d93915495d623988e5627f76953a3e4771a8e3c2fafba0e0882f4a06b63ac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD1D93915495D623988E5627F76953A3E4771A8E3C2FAFBA0E0882F4A06B63AC"
Last-Modified: Tue, 06 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1042
Expires: Thu, 08 Sep 2022 06:28:39 GMT
Date: Thu, 08 Sep 2022 06:11:17 GMT
Connection: keep-alive
www.secure53rd734.dubya.net/images/ft15.png
50.116.16.203200 OK 25 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft15.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 210, 8-bit/color RGBA, non-interlaced\012- data
Hash 037375e352b152132f6aebda8cd5151f
5b523cc43d8041b0f740e8b2e95321fa21f7111b
8bd51bff480633218b2246093af999b90e219a34558d9ebe6da82756d77d9a85
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft15.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:16 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:22:58 GMT
Accept-Ranges: bytes
Content-Length: 25141
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft22.png
50.116.16.203200 OK 25 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft22.png
IP 50.116.16.203:0
File type PNG image data, 155 x 235, 8-bit/color RGBA, non-interlaced\012- data
Hash 446c0620f89f8b20d22dffaf8ded00e7
990001c762531e0c2f6c7082082b3fd1944dad6b
102444baccc10903bef62611ac21c5a1981de686b134d708592c222b026c2139
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft22.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:26:54 GMT
Accept-Ranges: bytes
Content-Length: 24708
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 08 Sep 2022 05:38:18 GMT
Cache-Control: max-age=3600
Expires: Thu, 08 Sep 2022 06:13:35 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zWQHpOcPHpDtt_F2raAz6QQHoCcWGL_J_1M-L7EdpJG9Ab6w2OLCwA==
Age: 1979
www.secure53rd734.dubya.net/images/ft12.png
50.116.16.203200 OK 69 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft12.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 198, 8-bit/color RGBA, non-interlaced\012- data
Hash 24bf29d3a2038c0432d7087fd78e3a16
f1619631ccd247e5551f7c0978f38e8bfea435f6
8c1c93c521e634e03443af3127f1b51bf28e0b3b8c0fd0ab63ee8e63e97f56b2
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft12.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:20:20 GMT
Accept-Ranges: bytes
Content-Length: 68695
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft14.png
50.116.16.203200 OK 130 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft14.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 215, 8-bit/color RGBA, non-interlaced\012- data
Size 130 kB (130136 bytes)
Hash b36475affbb579756e9551cf79a81114
1b55351b04d113f8aa042db1753a55e4b7ce5ced
0097467f6305c79b5b177cc26a4f329abf94f9d2bd3d13f4ee96357aed34f00e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft14.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:22:34 GMT
Accept-Ranges: bytes
Content-Length: 130136
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a81b0f5b5d11bf95fc176833b2f6e808
5b194aa5a8bf3a6b0d117ccfd0f487f6db0587b5
8f6ae83f2b85db7174bbbc6553e2921617b5c8a401315e76082682949a0bd9cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4571
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 06:11:17 GMT
Last-Modified: Thu, 08 Sep 2022 04:55:06 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
www.secure53rd734.dubya.net/images/ft8.png
50.116.16.203200 OK 228 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft8.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 171, 8-bit/color RGBA, non-interlaced\012- data
Size 228 kB (227995 bytes)
Hash acef4b51842d0878d66eddca460ff18b
160b3ccb2b53558c6369f2b1ce2beb21d9487601
0986aeaf3a286dc3a8b706f724203cd2136fe7525c223025475111f907db5fb0
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft8.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:18:02 GMT
Accept-Ranges: bytes
Content-Length: 227995
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft9.png
50.116.16.203200 OK 273 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft9.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 191, 8-bit/color RGBA, non-interlaced\012- data
Size 273 kB (273046 bytes)
Hash 099f6666df5f42c61c1820412b8895a1
45a54b5068f67864da5fae2ace450d65b58da6da
e68043b8602b3d22bafe54ddddaa3ab727789fe48c85634cc7f25e140ddedbd6
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft9.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:18:34 GMT
Accept-Ranges: bytes
Content-Length: 273046
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft13.png
50.116.16.203200 OK 248 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft13.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 219, 8-bit/color RGBA, non-interlaced\012- data
Size 248 kB (247629 bytes)
Hash 15a3cd9015a6ab1d93f126072f30a074
000a2d7fc33f83b4a511a6bb7accec32a6e6df1c
6ff608f69ab3159ef41c595e4152a1d46576a0c6115e1faef9811d7bc209a94e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft13.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:21:02 GMT
Accept-Ranges: bytes
Content-Length: 247629
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft21.png
50.116.16.203200 OK 4.5 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft21.png
IP 50.116.16.203:0
File type PNG image data, 361 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 000c6131f2120e1628b2aca12851ee11
fc68e8e317042a04145c640517e690fa6675195d
649357cfcbd4cc0944bfd5a33ab787637b6dbba0dee93def474ecf3cfc08f7f0
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft21.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:26:30 GMT
Accept-Ranges: bytes
Content-Length: 4542
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft11.png
50.116.16.203200 OK 378 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft11.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 176, 8-bit/color RGBA, non-interlaced\012- data
Size 378 kB (377866 bytes)
Hash f392aea16ce6da0bd3cf14a733adef0c
0b345b694f7ed93a8882d7bce9fce5cbcd363313
75d837eb9526adfe286ab301897666ad00106697aa7bf23cbbb517c6c646fc71
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft11.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:19:50 GMT
Accept-Ranges: bytes
Content-Length: 377866
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/tw.png
50.116.16.203200 OK 1.5 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/tw.png
IP 50.116.16.203:0
File type PNG image data, 224 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash 887450cbcfad540ee5ffdc5142caaa1c
d5ba210d53e6205e15ac8b5ec83596bd328ff7ef
8f468e5c02d0a515faae5ab6f3bfbfb93b430869a42e206be8349780b71702b1
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tw.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:26:02 GMT
Accept-Ranges: bytes
Content-Length: 1509
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft10.png
50.116.16.203200 OK 298 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft10.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 184, 8-bit/color RGBA, non-interlaced\012- data
Size 298 kB (298061 bytes)
Hash 48b9df00298f6691e29ed5f1c2deeac3
4be4e5619c7224fc2fba5e26db443cbf4b216791
9bb82c01b4c3916009e147dc86e5eb7f16c3d771985a1fafd645415e36a126ac
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft10.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:19:28 GMT
Accept-Ranges: bytes
Content-Length: 298061
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft17.png
50.116.16.203200 OK 16 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft17.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash 875b6b28095102639537a4c3edb065c1
de5a1f6c677299e3bcbd8bfd4499a9bdd5488f27
5dfcc2cb667149fd5d5d970d56f153c615460f81499ce3f7161fe0daf10e6b7e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft17.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:23:56 GMT
Accept-Ranges: bytes
Content-Length: 15968
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft16.png
50.116.16.203200 OK 13 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft16.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 205, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b5f49569301f265fa9a4c368a589d8a
a10f6e48b6084d526c517377942cd123cc32f9f5
b59e5de8dcaae5da4f8632dddb3088b8c7cb8a8c6b75ca0b1b33dd76eef1c435
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft16.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:23:26 GMT
Accept-Ranges: bytes
Content-Length: 12709
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft19.png
50.116.16.203200 OK 7.7 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft19.png
IP 50.116.16.203:0
File type PNG image data, 1152 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f9c545842f7b714765bec31477150254
96ab1579e907cf84471a90c6d7a79d7538ea2c75
56cbf4493a4acd229b66c7f795a6dd4348db37abd9ac2448f2c029ab97a92b60
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft19.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:25:12 GMT
Accept-Ranges: bytes
Content-Length: 7693
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
push.services.mozilla.com/
54.191.222.112101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.191.222.112:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Shw108IZL93I9Dln5H9sVQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: l5DmIYVuzJDCEqvU2jkhD834p+Y=
www.secure53rd734.dubya.net/images/b7.png
50.116.16.203200 OK 2.3 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/b7.png
IP 50.116.16.203:0
File type PNG image data, 209 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 4b600f5e64f051ddfe97ebbd563e7030
d4cc4994cc9a815d494a18078a425524fb116e4e
a3b687ef763b0ab034f7647b22b64c6e20b7ac2d7859a1f2bc06db9f293d879b
Analyzer Verdict Alert quad9 Sinkholed
GET /images/b7.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Wed, 06 Sep 2017 00:15:14 GMT
Accept-Ranges: bytes
Content-Length: 2328
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/b8.png
50.116.16.203200 OK 1.1 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/b8.png
IP 50.116.16.203:0
File type PNG image data, 62 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 407680d248016f3827fdc22b21b5fddf
cd5a0a75f85cd664e47660956ef09da010073ef4
d6561cce530d329d36cd835f10967638cefa7d91dce89e580fe99c009d4b1484
Analyzer Verdict Alert quad9 Sinkholed
GET /images/b8.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Wed, 06 Sep 2017 00:15:34 GMT
Accept-Ranges: bytes
Content-Length: 1074
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/loign.png
50.116.16.203200 OK 962 B URL HTTP/1.1 www.secure53rd734.dubya.net/images/loign.png
IP 50.116.16.203:0
File type PNG image data, 230 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash cf5e830931556fb2f6e5eea928ec8028
f51b316694eb01172c7fb830f10b862b41349d74
91dfe8f19806a6db155b625d54e69687e959598fae99bfa0f7866584a6461b8b
Analyzer Verdict Alert quad9 Sinkholed
GET /images/loign.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Sun, 29 Jul 2018 21:49:10 GMT
Accept-Ranges: bytes
Content-Length: 962
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft18.png
50.116.16.203200 OK 8.2 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft18.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 169, 8-bit/color RGBA, non-interlaced\012- data
Hash eea41f286748c615d04180f19d890de1
631302634a0a550107cd34f91188a9e8e88070ab
24d8a52b1957b2e8f41cd46a2ff1e7896d83006491272b0f0937f53cadb347f6
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft18.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Tue, 06 Feb 2018 02:09:32 GMT
Accept-Ranges: bytes
Content-Length: 8236
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/b1.png
50.116.16.203200 OK 296 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/b1.png
IP 50.116.16.203:0
File type PNG image data, 1349 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 296 kB (295771 bytes)
Hash 19888c7dec749f155fe711304ff491ca
8c0fb8e9fd08562cfee749700e25d0416b1033c6
f0be0d8d29a1b35272009b8ae1d8c3f9748b67c40400ea0fa3291abafb08a6bc
Analyzer Verdict Alert quad9 Sinkholed
GET /images/b1.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Sat, 22 Sep 2018 22:21:38 GMT
Accept-Ranges: bytes
Content-Length: 295771
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft20.png
50.116.16.203200 OK 2.2 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft20.png
IP 50.116.16.203:0
File type PNG image data, 155 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 8c56f8323f9a679d063bcdb8c6dc2188
f42cf956e2793cb99825919340fffdc6ea97cccb
5215c41645378bbae3b0825ce00234c4e731648477ade02d497d2f2c2464a0ca
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft20.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:25:36 GMT
Accept-Ranges: bytes
Content-Length: 2230
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/b3.png
50.116.16.203200 OK 280 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/b3.png
IP 50.116.16.203:0
File type PNG image data, 1349 x 182, 8-bit/color RGBA, non-interlaced\012- data
Size 280 kB (279483 bytes)
Hash 274d7c4b20eb7beb45d81a33ffedcc4d
bfd5dd77351ec324e075ce5ebe39dac354ce4981
d3a08c42dbd1e171f43160d1824ccc910a9551f6224ff1fc1e59f4ea8d8b94ff
Analyzer Verdict Alert quad9 Sinkholed
GET /images/b3.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:17 GMT
Server: Apache
Last-Modified: Sat, 22 Sep 2018 22:22:38 GMT
Accept-Ranges: bytes
Content-Length: 279483
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/favicon.ico
50.116.16.203200 OK 12 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/favicon.ico
IP 50.116.16.203:0
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 6196296d6da29c45fa85682fff153ecf
3d20183ede291a0f86f7a0a7d7fb81efa8b06c01
c84fa4b619a90081150350106c4d17279b260f7b0dc6ceea709ec8488cc34466
Analyzer Verdict Alert quad9 Sinkholed
GET /images/favicon.ico HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 06:11:18 GMT
Server: Apache
Last-Modified: Wed, 06 Sep 2017 00:58:10 GMT
Accept-Ranges: bytes
Content-Length: 12219
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/x-icon
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4395
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 06:11:19 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4395
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 06:11:19 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4395
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 06:11:19 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4395
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 06:11:19 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4395
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 06:11:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b1ceaeb-6cf1-42e7-b7e3-28eb631f4b98.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b1ceaeb-6cf1-42e7-b7e3-28eb631f4b98.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 77aa1349e0d44b4756bbede0cbd05413
339fc154a29a7459101dd6125bebf38219bfd11a
74e6439067201bba5e0edc7fd477c62c0566c5fac30b035150d06fea2d30cce0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b1ceaeb-6cf1-42e7-b7e3-28eb631f4b98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12131
x-amzn-requestid: c190466e-eab9-4705-be7e-9724d240a1a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9VNF8BoAMFYBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f54-0f718d821b0107bb1b1474a9;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:28 GMT
x-amz-cf-pop: SFO20-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: f88GXTqODlTXl1sX4BakGIcPj0sGV6IUQ3R8zpBQwg-QEGe3YstK0Q==
via: 1.1 36cc13280ef76bb2fee6ae5eed6fec2e.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:47:44 GMT
age: 30215
etag: "339fc154a29a7459101dd6125bebf38219bfd11a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca5b5d4ac26d97b5729a30ecdc688bc
3e633bc6c4ab9adfe84899e5209d73bef1d097eb
2c8275d1819d933f86df9685b76aea030842ba5a341c59ea88ffd2da99a5a3d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7885
x-amzn-requestid: 305dc6b7-eb3d-40ad-af89-8b60be935637
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9ThE3DIAMFRtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-7c0b58644e26de7f27c5b388;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: MG4_YJuVqfSCQ80FTdo5XU8xIi74XtILVbIQAbByh54QNOoMJCyS-Q==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:47:05 GMT
age: 30254
etag: "3e633bc6c4ab9adfe84899e5209d73bef1d097eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd38a7ac-451e-4dae-8707-f68a3c27ee4e.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd38a7ac-451e-4dae-8707-f68a3c27ee4e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ccc1d45458086694a8221a8a6c6aa3b
b8f1359214f21be812390a6cca80b8e84c26a403
461503caa5ec14c1214bdc19795e47b8c1c3c5be1b21f0f29e923e5191e93846
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd38a7ac-451e-4dae-8707-f68a3c27ee4e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8693
x-amzn-requestid: aae6e4f7-9b0a-49da-b2f1-58b625609942
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9TgFokoAMFbwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-27854a575dea22e1035454e3;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: ja2OeAUlF9lkO2n0bSzYlZHXKnfa6Z4_lU7lAoLZkccaw7CCzFlyKg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:47:05 GMT
age: 30254
etag: "b8f1359214f21be812390a6cca80b8e84c26a403"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a07d553b6441514870ed7e9e989a29a7
98c145b9326d1e6036fa9089d87a25232dd45b0b
373a586b596016baeb8de98022207c25af24c099c06077edbdfd837cffc31a0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7492
x-amzn-requestid: 2c5e9ff3-c7a4-4a8f-96bf-74f0ca5d9137
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9dOHguIAMFjGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f87-70dbe6532b1a241e6dbe729e;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:39:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lbCmv9fV9iBGOQvxRzleYwC5dBYeu1kRgSSkC2hycDmavyXj-KlFSw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:24:59 GMT
age: 27980
etag: "98c145b9326d1e6036fa9089d87a25232dd45b0b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F544c97ea-c914-4fdc-82af-945cb0832cde.jpeg
34.120.237.76200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F544c97ea-c914-4fdc-82af-945cb0832cde.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash edcd025faafbf7161d4d606f47304c2b
a99519726bc82f2cc0541c79f47ddd15c7362669
ed7b147e3ea371ea4b014805d9c2f45407918924bb2ec540ea6f7cd0a8b1b698
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F544c97ea-c914-4fdc-82af-945cb0832cde.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3529
x-amzn-requestid: 6ee305f1-aaaf-49eb-94b5-1176943a1922
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YCjYWFzNoAMFajg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63174c35-7e8ef3554da3194d47726d0d;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 13:33:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: u3PSpvVEoPGJTFmcB643hOaVUAp-iW0X68PxtIaJZvGHc-Bh79gPgQ==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:42:18 GMT
age: 30541
etag: "a99519726bc82f2cc0541c79f47ddd15c7362669"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
smallenvelop.com/wp-content/uploads/2014/08/Preloader_11.gif
194.1.147.58404 Not Found 24 kB URL HTTP/2 smallenvelop.com/wp-content/uploads/2014/08/Preloader_11.gif
IP 194.1.147.58:0
ASN #210250 K Media Tech Ltd.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8087), with CRLF, LF line terminators
Hash 92f0f3302d8d3031f268932e71bec208
a8a4767c644388e25056df0ebbbb2ce1dfceca96
f17ae630c8ee4fc4393888ef1515116cb2255ac3a969974cdda9b72e47d1e934
GET /wp-content/uploads/2014/08/Preloader_11.gif HTTP/1.1
Host: smallenvelop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Thu, 08 Sep 2022 06:11:17 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.28
set-cookie: PHPSESSID=d2aim5spndt6esj6h6814197ve; path=/; secure; HttpOnly
pragma: no-cache
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-ua-compatible: IE=edge
link: <https://smallenvelop.com/wp-json/>; rel="https://api.w.org/"
content-encoding: br
vary: Accept-Encoding
wpx: 1
x-turbo-charged-by: LiteSpeed
x-edge-location: WPX CLOUD/AMS02
server: WPX CLOUD/AMS02
X-Firefox-Spdy: h2