urlquery - report: mail.estartupchallenge-egabon.org/web/Jorange/orange/c350a496bddabde/login.php

Scan Date	Severity	Indicator	Comment
2023-01-28	2	mail.estartupchallenge-egabon.org/web/Jorange/orange/c350a496bddabde/login.php	Phishing
2023-01-28	2	mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi	Phishing

Date	UQ / IDS / BL	URL	IP
2023-02-06 15:54:27 +0000	0 - 0 - 2	mail.estartupchallenge-egabon.org/web/Jorange (...)	108.179.242.163
2023-02-06 14:17:11 +0000	0 - 0 - 2	mail.estartupchallenge-egabon.org/web/Jorange (...)	108.179.242.163
2023-02-06 03:15:38 +0000	0 - 0 - 2	mail.estartupchallenge-egabon.org/web/Jorange (...)	108.179.242.163
2023-02-06 03:14:17 +0000	0 - 0 - 2	mail.estartupchallenge-egabon.org/web/Jorange (...)	108.179.242.163
2023-02-06 03:07:11 +0000	0 - 0 - 2	mail.estartupchallenge-egabon.org/web/Jorange (...)	108.179.242.163

Date	UQ / IDS / BL	URL	IP
2023-03-21 08:19:31 +0000	0 - 0 - 2	starlitebaby.com/xls/case.2454.xls	70.40.220.117
2023-03-21 08:18:28 +0000	0 - 0 - 2	starlitebaby.com/xls/case_345.xls	70.40.220.117
2023-03-21 08:18:26 +0000	0 - 0 - 2	starlitebaby.com/xls/case.6274.xls	70.40.220.117
2023-03-21 08:17:59 +0000	0 - 0 - 2	starlitebaby.com/xls/case_4039.xls	70.40.220.117
2023-03-21 08:15:27 +0000	0 - 0 - 2	mail.sorderatoluca.com/wp-content/host8/admin/	192.254.233.215

Date	UQ / IDS / BL	URL	IP
2023-03-21 08:08:13 +0000	0 - 0 - 5	mail.estartupchallenge-egabon.org/web/Jorange (...)	108.179.242.157
2023-03-21 06:02:20 +0000	0 - 1 - 5	mail.estartupchallenge-egabon.org/web/Jorange (...)	108.179.242.157
2023-03-21 05:05:51 +0000	0 - 1 - 5	mail.estartupchallenge-egabon.org/web/Jorange (...)	108.179.242.157
2023-03-21 02:09:37 +0000	0 - 0 - 5	mail.estartupchallenge-egabon.org/web/jorange (...)	108.179.242.157
2023-03-21 01:46:27 +0000	0 - 0 - 5	mail.estartupchallenge-egabon.org/web/jorange (...)	108.179.242.157

Date	UQ / IDS / BL	URL	IP
2023-03-21 02:16:02 +0000	0 - 0 - 3	primusth.com/impresa/Agenzia_Entrate.zip	150.95.83.209
2023-03-21 02:15:50 +0000	0 - 0 - 3	matchtranslations.com/impresa/documenti.zip	31.170.167.5
2023-03-21 02:15:37 +0000	0 - 0 - 3	maviproducciones.com/impresa/Agenzia_Entrate.zip	185.212.70.98
2023-03-21 02:15:24 +0000	0 - 3 - 1	62.204.41.88/lend/rh_0.exe	62.204.41.88
2023-03-21 02:15:10 +0000	0 - 2 - 2	2.59.119.250/d/xd.sh4	2.59.119.250

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8" Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4659 Expires: Sat, 28 Jan 2023 13:38:20 GMT Date: Sat, 28 Jan 2023 12:20:41 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 9fbe85f42e8ae8ae41cc12df5f98b141 Sha1: 949fa36ff0f22f72565fd584bef094dd4de23037 Sha256: 184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE" Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3879 Expires: Sat, 28 Jan 2023 13:25:20 GMT Date: Sat, 28 Jan 2023 12:20:41 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 81dd5c5cc5b3278876cb44dcb520a60f Sha1: c0511a59e9eccdcdda98717b87c89c5d59974808 Sha256: 41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
GET /web/Jorange/orange/c350a496bddabde/login.php HTTP/1.1 Host: mail.estartupchallenge-egabon.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: mail.estartupchallenge-egabon.org/web/Jorange/orange/c3 (...) FQDN: mail.estartupchallenge-egabon.org IP: 108.179.242.163 HASH: bc324bdc6feda4c6cb7c582d5a5e7d66f257ae49d63cefeda032b181ecc393d4 108.179.242.163 HTTP/1.1 302 Found Content-Type: text/html; charset=iso-8859-1 Date: Sat, 28 Jan 2023 12:20:41 GMT Server: Apache Location: http://mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi Content-Length: 250 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 250 Md5: 33a1814876af328cb30bbb2ec1ffa9a5 Sha1: 7b2b108d5e3c910900f62daaf42811f6c55af315 Sha256: bc324bdc6feda4c6cb7c582d5a5e7d66f257ae49d63cefeda032b181ecc393d4 Alerts: Blocklists: - fortinet: Phishing
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sat, 28 Jan 2023 11:35:29 GMT age: 2712 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: bf0c602d32b3c14606f22a86183b5e3c Sha1: 6eabd8d83475eba731968abe1a05a8bfd272f160 Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3" Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12870 Expires: Sat, 28 Jan 2023 15:55:11 GMT Date: Sat, 28 Jan 2023 12:20:41 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 69f73ac59327cd9ad7d99816ccfcc03e Sha1: c54844f82dbee0d5ee4c8ce344eb0139373e6c6b Sha256: e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: CQsB60GDRwganphirA3TuIg3QjZk5plkWrUX8RkRwWBTc6eX/MHtY0YnVklBEEd4ItG146DQtsE= x-amz-request-id: GBFFB9MWDDS7DS6M content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sat, 28 Jan 2023 11:20:57 GMT age: 3584 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 7b922915ebf1fa3639b333f994c74f24 Sha1: 144a3f80b98fd0652d4614f24cf6cbbee40f8938 Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sat, 28 Jan 2023 12:20:41 GMT content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: mail.estartupchallenge-egabon.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi FQDN: mail.estartupchallenge-egabon.org IP: 108.179.242.163 HASH: dfbd0494812a21aeb74a252bc5eb9e69301596fdf40f17615f7278195b7be774 108.179.242.163 HTTP/1.1 200 OK Content-Type: text/html Date: Sat, 28 Jan 2023 12:20:41 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 392 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators Size: 392 Md5: df660086f6dc7b6b6e74c56844d24fc6 Sha1: 3d83164a92d54514194aff1459eea7825d8126f0 Sha256: dfbd0494812a21aeb74a252bc5eb9e69301596fdf40f17615f7278195b7be774 Alerts: Blocklists: - fortinet: Phishing
GET /favicon.ico HTTP/1.1 Host: mail.estartupchallenge-egabon.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi	URL: mail.estartupchallenge-egabon.org/favicon.ico FQDN: mail.estartupchallenge-egabon.org IP: 108.179.242.163 HASH: bc324bdc6feda4c6cb7c582d5a5e7d66f257ae49d63cefeda032b181ecc393d4 108.179.242.163 HTTP/1.1 302 Found Content-Type: text/html; charset=iso-8859-1 Date: Sat, 28 Jan 2023 12:20:41 GMT Server: Apache Location: http://mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi Content-Length: 250 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 250 Md5: 33a1814876af328cb30bbb2ec1ffa9a5 Sha1: 7b2b108d5e3c910900f62daaf42811f6c55af315 Sha256: bc324bdc6feda4c6cb7c582d5a5e7d66f257ae49d63cefeda032b181ecc393d4
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sat, 28 Jan 2023 11:41:40 GMT age: 2341 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /?dn=referer_detect&pid=5POL4F2O4 HTTP/1.1 Host: iyfhshsp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://mail.estartupchallenge-egabon.org/ Upgrade-Insecure-Requests: 1	URL: iyfhshsp.com/?dn=referer_detect&pid=5POL4F2O4 FQDN: iyfhshsp.com IP: 208.91.196.46 HASH: 78937bb289c0b92c0eeac2a4ad7dd790fc02f52b670d9049e0901f960c0984e9 208.91.196.46 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 28 Jan 2023 12:20:41 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_RKXc7TxPHfYBne7waQCCj6TtTylnt5/H6p24b3MGsAjsiw30tN5v8r0FC9L2itAmhz1DPsmWDbxAwLA2QZHSLw== Cteonnt-Length: 3826 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Cache-Control: private Content-Encoding: gzip Content-Length: 1802 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (567), with CRLF line terminators Size: 1802 Md5: e01cb8eb2113211705c5caf1fe6e5537 Sha1: a4dbc1b774880bf34c1f25438729de49d5962ab1 Sha256: 78937bb289c0b92c0eeac2a4ad7dd790fc02f52b670d9049e0901f960c0984e9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16" Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17191 Expires: Sat, 28 Jan 2023 17:07:13 GMT Date: Sat, 28 Jan 2023 12:20:42 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 16a7b6a7128312e2f985d30df18c4487 Sha1: 6017bff79ffb525d9c7f9f32b999b74b5dc69602 Sha256: 663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
GET /?domain=estartupchallenge-egabon.org&dn=estartupchallenge-egabon.org&fp=Bbi9dXRrlGJmigwaHcjzUDsifukmwpUWm0VYfa7aF9zLOylVMEgGuSFjuK91rNU0SxbVcVaO%2F1Trx%2FWPJE8XaxlmFTWZ0MU82LLL%2Bv67jRxlqVacrid0%2FvygrK%2BQnzbzAP%2B7lslDsm9fP3m3pXn%2FIf8JSGSosCHxegxLzusE6s9MT31TEX610iG6rPijm4tD&prvtof=jq905DZExPlMNaLoly5wn9uDdkNzy5cvMUifKaTXVVu4qJmwfgiFrskCjS07JjL%2B0pIXYG1kV%2B2NsYEPuFG3fg%3D%3D&poru=RLCNHWCJuGsCvwV%2F5SkNqIXcdF2dUuuwAwh%2FRCZmpSd7pEl6FIRRcm37%2FKDTqKNfEurNJXi4Q1rsvPHdCa3K4MHcFcLBU64vvAsasFHSAZc%3D& HTTP/1.1 Host: iyfhshsp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://iyfhshsp.com/?dn=referer_detect&pid=5POL4F2O4 Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: iyfhshsp.com/?domain=estartupchallenge-egabon.org&dn=es (...) FQDN: iyfhshsp.com IP: 208.91.196.46 HASH: f9c8e1f92baec98a9be5beeee7e73113d0e770e9f10f9e70842cd56a626fc724 208.91.196.46 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 28 Jan 2023 12:20:42 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Cteonnt-Length: 272 Keep-Alive: timeout=5, max=111 Connection: Keep-Alive Cache-Control: private Content-Encoding: gzip Content-Length: 196 --- Additional Info --- Magic: HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 196 Md5: ea30aba73af59d760c4b4379bc8f918b Sha1: 9d555d6e0428f2fd2daf793a7b24183c4581bda4 Sha256: f9c8e1f92baec98a9be5beeee7e73113d0e770e9f10f9e70842cd56a626fc724
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: SOChtlXHIIUcOyrwShiGMQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 52.12.67.61 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.12.67.61 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: wCCbWladX8N4Gk8/HGEH+A4X2eU= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1" Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9404 Expires: Sat, 28 Jan 2023 14:57:27 GMT Date: Sat, 28 Jan 2023 12:20:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2e21811f62c077f45a93d7c3b543998d Sha1: 3e890a73bb51d9dd1021d5339271aa40833ba258 Sha256: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1" Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9404 Expires: Sat, 28 Jan 2023 14:57:27 GMT Date: Sat, 28 Jan 2023 12:20:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2e21811f62c077f45a93d7c3b543998d Sha1: 3e890a73bb51d9dd1021d5339271aa40833ba258 Sha256: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1" Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2621 Expires: Sat, 28 Jan 2023 13:04:24 GMT Date: Sat, 28 Jan 2023 12:20:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2e21811f62c077f45a93d7c3b543998d Sha1: 3e890a73bb51d9dd1021d5339271aa40833ba258 Sha256: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1" Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9404 Expires: Sat, 28 Jan 2023 14:57:27 GMT Date: Sat, 28 Jan 2023 12:20:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2e21811f62c077f45a93d7c3b543998d Sha1: 3e890a73bb51d9dd1021d5339271aa40833ba258 Sha256: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1" Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9404 Expires: Sat, 28 Jan 2023 14:57:27 GMT Date: Sat, 28 Jan 2023 12:20:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2e21811f62c077f45a93d7c3b543998d Sha1: 3e890a73bb51d9dd1021d5339271aa40833ba258 Sha256: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7538 x-amzn-requestid: 113924cc-a196-4dbd-91d9-68c213265afe x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: e3fobF-ZoAMFjjA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63c61302-6b24941a642b22cf21e47dc0;Sampled=0 x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:18 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 2P09wOtKPDHjxxAuzcLFMQJwmGN1zNJcH9LA6IJpeaGiaPVRF4y-TA== via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google date: Fri, 27 Jan 2023 22:14:23 GMT age: 50780 etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7538 Md5: 131eb343c5abd61939457d69bd371348 Sha1: ffb2035cf64fc83f01db5c6f26ffa264b6aac95b Sha256: 8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3237aa3-30cf-4312-861c-8d923987ed4b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: ee90912b731ff31e52ccd404bf45ec6b6d3802247a29f9397eed153ab709df96 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8569 x-amzn-requestid: d97c9436-5e2d-42a2-ad40-84c7776cdac3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fa_rVFA_oAMF-2A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d44648-03ff23d6072683a067472191;Sampled=0 x-amzn-remapped-date: Fri, 27 Jan 2023 21:46:48 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: FuvSHsmeURS0TVrB-5IPYpmsovQh5OWzvsmlT2nzkDGfO2Q8gwP3Xw== via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google date: Fri, 27 Jan 2023 22:15:45 GMT age: 50698 etag: "130b6f6d592f3ab052015656653a1b3ac259599d" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8569 Md5: 335cb821617fe98e993190c93c616f86 Sha1: 130b6f6d592f3ab052015656653a1b3ac259599d Sha256: ee90912b731ff31e52ccd404bf45ec6b6d3802247a29f9397eed153ab709df96
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdeb12df7-074b-4044-bdbe-0e07bccbc8e9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 706e84bc63fd98acaeb72789239af3210ae6e3910e6589d92a25899dc9059dfc 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 12397 x-amzn-requestid: e8436997-696d-483a-b03a-a84e7ca614ea x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fa_T5HbzoAMFXsw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d445b2-1c2ccd0a187d0a3e2f6a59cc;Sampled=0 x-amzn-remapped-date: Fri, 27 Jan 2023 21:44:18 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: lmLHc8fKQYUpq9B-GyOQ0FKzhxi0ToTEPA7cu6JnQftgDFDNV8USvw== via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google date: Fri, 27 Jan 2023 21:56:37 GMT etag: "62493ca03be9870aac2341e033611a6d56bd322a" age: 51846 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12397 Md5: 0ed1a0bd725b2078b4cfe4ed83877901 Sha1: 62493ca03be9870aac2341e033611a6d56bd322a Sha256: 706e84bc63fd98acaeb72789239af3210ae6e3910e6589d92a25899dc9059dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4475 x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fa_e6HsaIAMF5Lg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0 x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA== via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google date: Fri, 27 Jan 2023 21:56:46 GMT age: 51837 etag: "ab4f6528594a1725934727dc7d834c028a79c609" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4475 Md5: 4205d8106659e00fff1cbe9262918b8c Sha1: ab4f6528594a1725934727dc7d834c028a79c609 Sha256: 31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22cc3f55-9811-4ec2-a57e-a3e71a3f0554.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7585 x-amzn-requestid: bfb52acb-e0d7-482d-8be9-be5db1c16cac x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fa_vkE5roAMF0Hw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d44663-2d38d314177e0ac40d4c8240;Sampled=0 x-amzn-remapped-date: Fri, 27 Jan 2023 21:47:15 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: K9YWM9eaEc1DQ6wtEEuADnG1U-ahRBXDaiHIAm20dkWMOxPWBlJidw== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google date: Fri, 27 Jan 2023 22:46:13 GMT age: 48870 etag: "b9d37c2b14f890d41983a59f352e8f7caa9c94bb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7585 Md5: ea24bcba583bd8bd139559448a343e68 Sha1: b9d37c2b14f890d41983a59f352e8f7caa9c94bb Sha256: e5ef5975eec964ae1684deb424f00833f2d217bdc7e6c385320ed3adeb6bc1c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 13375 x-amzn-requestid: 372fcbe8-85a1-4be2-a006-31fb9289c5e9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fa-CxF6BoAMFyGg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d443ab-4b9860545c612cc416cbe599;Sampled=0 x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: otEuPlfCL7DeVwGZiGJuMjxjVyGdMwxPWeCz5T_mpXboi-oRujKhBw== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Fri, 27 Jan 2023 21:48:58 GMT age: 52305 etag: "f5c7e2137efa07a207427a6b6fe1df541f85ea25" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13375 Md5: b4afa01d2ffe17f8378e4c0b5afd4608 Sha1: f5c7e2137efa07a207427a6b6fe1df541f85ea25 Sha256: 84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8" 

                                        
                                            
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4659 

                                        
                                            
Expires: Sat, 28 Jan 2023 13:38:20 GMT 

                                        
                                            
Date: Sat, 28 Jan 2023 12:20:41 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    9fbe85f42e8ae8ae41cc12df5f98b141

                                                Sha1:   949fa36ff0f22f72565fd584bef094dd4de23037

                                                Sha256: 184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3" 

                                        
                                            
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12870 

                                        
                                            
Expires: Sat, 28 Jan 2023 15:55:11 GMT 

                                        
                                            
Date: Sat, 28 Jan 2023 12:20:41 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    69f73ac59327cd9ad7d99816ccfcc03e

                                                Sha1:   c54844f82dbee0d5ee4c8ce344eb0139373e6c6b

                                                Sha256: e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 28 Jan 2023 12:20:41 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
access-control-expose-headers: content-type 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: mail.estartupchallenge-egabon.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi

                                         108.179.242.163

                                        
                                            HTTP/1.1 302 Found 

                                        
                                            
Content-Type: text/html; charset=iso-8859-1

                                        

                                        
                                            
Date: Sat, 28 Jan 2023 12:20:41 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Location: http://mail.estartupchallenge-egabon.org/cgi-sys/suspendedpage.cgi 

                                        
                                            
Content-Length: 250 

                                        
                                            
Keep-Alive: timeout=5, max=75 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

                                                Size:   250

                                                Md5:    33a1814876af328cb30bbb2ec1ffa9a5

                                                Sha1:   7b2b108d5e3c910900f62daaf42811f6c55af315

                                                Sha256: bc324bdc6feda4c6cb7c582d5a5e7d66f257ae49d63cefeda032b181ecc393d4

                                        
                                            GET /?dn=referer_detect&pid=5POL4F2O4 HTTP/1.1 

                                        
                                            
Host: iyfhshsp.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://mail.estartupchallenge-egabon.org/ 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         208.91.196.46

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Sat, 28 Jan 2023 12:20:41 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Referrer-Policy: no-referrer-when-downgrade 

                                        
                                            
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version 

                                        
                                            
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") 

                                        
                                            
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_RKXc7TxPHfYBne7waQCCj6TtTylnt5/H6p24b3MGsAjsiw30tN5v8r0FC9L2itAmhz1DPsmWDbxAwLA2QZHSLw== 

                                        
                                            
Cteonnt-Length: 3826 

                                        
                                            
Keep-Alive: timeout=5, max=100 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
Cache-Control: private 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Content-Length: 1802 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (567), with CRLF line terminators

                                                Size:   1802

                                                Md5:    e01cb8eb2113211705c5caf1fe6e5537

                                                Sha1:   a4dbc1b774880bf34c1f25438729de49d5962ab1

                                                Sha256: 78937bb289c0b92c0eeac2a4ad7dd790fc02f52b670d9049e0901f960c0984e9

                                        
                                            GET /?domain=estartupchallenge-egabon.org&dn=estartupchallenge-egabon.org&fp=Bbi9dXRrlGJmigwaHcjzUDsifukmwpUWm0VYfa7aF9zLOylVMEgGuSFjuK91rNU0SxbVcVaO%2F1Trx%2FWPJE8XaxlmFTWZ0MU82LLL%2Bv67jRxlqVacrid0%2FvygrK%2BQnzbzAP%2B7lslDsm9fP3m3pXn%2FIf8JSGSosCHxegxLzusE6s9MT31TEX610iG6rPijm4tD&prvtof=jq905DZExPlMNaLoly5wn9uDdkNzy5cvMUifKaTXVVu4qJmwfgiFrskCjS07JjL%2B0pIXYG1kV%2B2NsYEPuFG3fg%3D%3D&poru=RLCNHWCJuGsCvwV%2F5SkNqIXcdF2dUuuwAwh%2FRCZmpSd7pEl6FIRRcm37%2FKDTqKNfEurNJXi4Q1rsvPHdCa3K4MHcFcLBU64vvAsasFHSAZc%3D& HTTP/1.1 

                                        
                                            
Host: iyfhshsp.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Referer: http://iyfhshsp.com/?dn=referer_detect&pid=5POL4F2O4 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         208.91.196.46

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Sat, 28 Jan 2023 12:20:42 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Referrer-Policy: no-referrer-when-downgrade 

                                        
                                            
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version 

                                        
                                            
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") 

                                        
                                            
Cteonnt-Length: 272 

                                        
                                            
Keep-Alive: timeout=5, max=111 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
Cache-Control: private 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Content-Length: 196 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document, ASCII text, with CRLF line terminators

                                                Size:   196

                                                Md5:    ea30aba73af59d760c4b4379bc8f918b

                                                Sha1:   9d555d6e0428f2fd2daf793a7b24183c4581bda4

                                                Sha256: f9c8e1f92baec98a9be5beeee7e73113d0e770e9f10f9e70842cd56a626fc724

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1" 

                                        
                                            
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9404 

                                        
                                            
Expires: Sat, 28 Jan 2023 14:57:27 GMT 

                                        
                                            
Date: Sat, 28 Jan 2023 12:20:43 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    2e21811f62c077f45a93d7c3b543998d

                                                Sha1:   3e890a73bb51d9dd1021d5339271aa40833ba258

                                                Sha256: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1" 

                                        
                                            
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2621 

                                        
                                            
Expires: Sat, 28 Jan 2023 13:04:24 GMT 

                                        
                                            
Date: Sat, 28 Jan 2023 12:20:43 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    2e21811f62c077f45a93d7c3b543998d

                                                Sha1:   3e890a73bb51d9dd1021d5339271aa40833ba258

                                                Sha256: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1" 

                                        
                                            
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=9404 

                                        
                                            
Expires: Sat, 28 Jan 2023 14:57:27 GMT 

                                        
                                            
Date: Sat, 28 Jan 2023 12:20:43 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    2e21811f62c077f45a93d7c3b543998d

                                                Sha1:   3e890a73bb51d9dd1021d5339271aa40833ba258

                                                Sha256: c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3237aa3-30cf-4312-861c-8d923987ed4b.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8569 

                                        
                                            
x-amzn-requestid: d97c9436-5e2d-42a2-ad40-84c7776cdac3 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fa_rVFA_oAMF-2A= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d44648-03ff23d6072683a067472191;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 27 Jan 2023 21:46:48 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: FuvSHsmeURS0TVrB-5IPYpmsovQh5OWzvsmlT2nzkDGfO2Q8gwP3Xw== 

                                        
                                            
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 27 Jan 2023 22:15:45 GMT 

                                        
                                            
age: 50698 

                                        
                                            
etag: "130b6f6d592f3ab052015656653a1b3ac259599d" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8569

                                                Md5:    335cb821617fe98e993190c93c616f86

                                                Sha1:   130b6f6d592f3ab052015656653a1b3ac259599d

                                                Sha256: ee90912b731ff31e52ccd404bf45ec6b6d3802247a29f9397eed153ab709df96

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4475 

                                        
                                            
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fa_e6HsaIAMF5Lg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA== 

                                        
                                            
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 27 Jan 2023 21:56:46 GMT 

                                        
                                            
age: 51837 

                                        
                                            
etag: "ab4f6528594a1725934727dc7d834c028a79c609" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4475

                                                Md5:    4205d8106659e00fff1cbe9262918b8c

                                                Sha1:   ab4f6528594a1725934727dc7d834c028a79c609

                                                Sha256: 31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 13375 

                                        
                                            
x-amzn-requestid: 372fcbe8-85a1-4be2-a006-31fb9289c5e9 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fa-CxF6BoAMFyGg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d443ab-4b9860545c612cc416cbe599;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: otEuPlfCL7DeVwGZiGJuMjxjVyGdMwxPWeCz5T_mpXboi-oRujKhBw== 

                                        
                                            
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 27 Jan 2023 21:48:58 GMT 

                                        
                                            
age: 52305 

                                        
                                            
etag: "f5c7e2137efa07a207427a6b6fe1df541f85ea25" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   13375

                                                Md5:    b4afa01d2ffe17f8378e4c0b5afd4608

                                                Sha1:   f5c7e2137efa07a207427a6b6fe1df541f85ea25

                                                Sha256: 84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12

URL	mail.estartupchallenge-egabon.org/web/Jorange/orange/c350a496bddabde/login.php
IP	108.179.242.163 (United States)
ASN	#46606 UNIFIEDLAYER-AS-1
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2023-01-28 12:20:51 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	2
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (0)

No passive DNS data

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 108.179.242.163

Last 5 reports on ASN: UNIFIEDLAYER-AS-1

Last 5 reports on domain: estartupchallenge-egabon.org

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (2)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (25)

Overview

Domain Summary (0)

No passive DNS data

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 108.179.242.163

Last 5 reports on ASN: UNIFIEDLAYER-AS-1

Last 5 reports on domain: estartupchallenge-egabon.org

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (2)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (25)

Network Intrusion Detection Systems