r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7181eff9c60e83eb0004ece591e47dca
0fd8cd0c9d10b0547938982e57d2c43e2d98679f
89c5c0e2d6890798644174a8e31976aec03a1b3deb03812afbb520e5ed68f522
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89C5C0E2D6890798644174A8E31976AEC03A1B3DEB03812AFBB520E5ED68F522"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8463
Expires: Fri, 09 Dec 2022 16:06:20 GMT
Date: Fri, 09 Dec 2022 13:45:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 388f6fea5bafa378266622b72311a6ee
447f102dc12172ce1ba44c5e94e1d7bb49d43372
a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2817
Expires: Fri, 09 Dec 2022 14:32:14 GMT
Date: Fri, 09 Dec 2022 13:45:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 13:08:18 GMT
content-type: application/json
age: 2219
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8234
Expires: Fri, 09 Dec 2022 16:02:31 GMT
Date: Fri, 09 Dec 2022 13:45:17 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: r/H8IqvRIYeXrVw3H5ZWhB9RA4eDr1pNwKoSTipgdhz9yy3MDNq3Ln+15qQOvWLJ/Ok6KNqtrFs=
x-amz-request-id: STEHBF74DJSXN3ZB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 12:48:20 GMT
age: 3417
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 13:45:17 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
webhdkl.me/
200 OK 30 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (27805), with CRLF line terminators
Hash 67de425c04f554dfa57286284d25fc6d
38e241e8f9855ac285268a4b4f70025fef6fd4b7
61404f3205a3d5581cbd787f561546c06e71cda04a4164132177b7f4d0d2394c
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:17 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 13 Nov 2022 05:52:56 GMT
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O0P9KnWRFiuA17mSwbTuS%2BWBgp9WUrNR%2F76o1d1Q7kAMt0zYBqZjgOspGb6ecEo8yPnlmfgWeilPooU%2BBAaUr%2Fv8831Fuwl19O1D36e9%2BFhh55MU9y4EHmcQSaxy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 776e2e2849ebfabc-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
webhdkl.me/img/92yU3_1E6qP.css?_nc_x=Ij3Wp8lg5Kz
200 OK 1.9 kB URL HTTP/1.1 webhdkl.me/img/92yU3_1E6qP.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (6603)
Hash 80f0fb471e76d661c79b7b47a9ded7b0
1bb74ddb21a19cade3e0ddc58a220f9c30e5f1fe
c6391499ffec7d954c467c1a0b6029ee607e489d4c201abaa47dd0a386f36917
Analyzer Verdict Alert fortinet Phishing
GET /img/92yU3_1E6qP.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:20:14 GMT
Vary: Accept-Encoding
ETag: W/"6276018e-1a1b"
Expires: Sat, 10 Dec 2022 01:45:17 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iP%2Fmh7VEz9tDP5mZueMTdyaiV4PvKKeqiQi1YDA5MSr30%2FiLodk%2FFKWuaWf3BP2ccbsV3l1tpNA3sQWEvLcNruQJJcDEsPoFvaiCa%2BNAyAspzRDqJNtSTIkR4m0t"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 776e2e2bbd0b0af6-OSL
alt-svc: h2=":443"; ma=60
webhdkl.me/img/EsyfAiyWshR.css?_nc_x=Ij3Wp8lg5Kz
200 OK 4.1 kB URL HTTP/1.1 webhdkl.me/img/EsyfAiyWshR.css?_nc_x=Ij3Wp8lg5Kz
IP
File type assembler source, ASCII text, with very long lines (4189)
Hash 1f88e51c21c3da7b3db447017fb3d347
38bd800c3f0517734bc1dafff23902a9f30a7372
6090edb6d083db7394a496301d28106ad1ae3f0a251fe33b38b2ca8198b753c2
Analyzer Verdict Alert fortinet Phishing
GET /img/EsyfAiyWshR.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:20:14 GMT
Vary: Accept-Encoding
ETag: W/"6276018e-33cb"
Expires: Sat, 10 Dec 2022 01:45:17 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WkWimooUC0UPuk7%2BJ1E6iNtzUtocdbQ%2F2VkWKYxIF7nKBXDMTEIEhjyUQcfgnjyZNQO%2BNJfbiqqYRU9BBVuq2TGj%2B35yZsYfpIyUsb5Kiaoz5APeKEA2oW7wI%2Bqy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 776e2e2bbd52b529-OSL
alt-svc: h2=":443"; ma=60
webhdkl.me/img/2VSZD9_JH43.js?_nc_x=Ij3Wp8lg5Kz
200 OK 107 kB URL HTTP/1.1 webhdkl.me/img/2VSZD9_JH43.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (18471)
Size 107 kB (106699 bytes)
Hash cb6329829309e596a00aec80ed63b8fb
878739ea270046e9ea678899b2921721fb7babb2
d7b3fc063341e586aeff86fc49493bc7035e31dd8532f6a3ff528d1ff5796633
GET /img/2VSZD9_JH43.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:20:13 GMT
Vary: Accept-Encoding
ETag: W/"6276018d-4d29b"
Expires: Sat, 10 Dec 2022 01:45:17 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Opcgsu4t0zwF86%2BdQfuu6vdt7%2FmC1VkagYoluaEvPbGtMyfyKNVgIKFWrdXcd6FGtaGBSsg%2FwhA2ofiF9%2F4B2SEAa%2Bcr0A7dD96u410RGR0BbBcm2gv8SBoQNqcU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 776e2e2bbec9b523-OSL
alt-svc: h2=":443"; ma=60
webhdkl.me/img/28bZN702Ikw.css?_nc_x=Ij3Wp8lg5Kz
200 OK 309 B URL HTTP/1.1 webhdkl.me/img/28bZN702Ikw.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (621)
Hash ab097e8174666fab6fdbf846bdb5e876
f5cc79a86ffd78b63aa45dbfcaffc26094734a50
b618bbeec3e29eb54c327a68a550a1668e9998c3ad209f03308db76bff87104f
Analyzer Verdict Alert fortinet Phishing
GET /img/28bZN702Ikw.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:29:08 GMT
ETag: W/"627603a4-2bd"
Expires: Sat, 10 Dec 2022 01:45:17 GMT
Cache-Control: max-age=43200
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kByDuOUsPJg8ybjtY11tPxncngN23PinZhXPjE1jHP9eOfTH6ptHJ%2Fjz4shXF%2FRavOi8tGaq2DFANXnba336W4bJfBx3IUwAgoHGcaF3f0lbCfoLPDSnM1Dch6bZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776e2e2bbf4afab4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 13:07:55 GMT
age: 2242
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
webhdkl.me/img/xnxHL8zVBjo.css?_nc_x=Ij3Wp8lg5Kz
200 OK 27 kB URL HTTP/1.1 webhdkl.me/img/xnxHL8zVBjo.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (52204)
Hash 3c7930f8f2402c2ddd61e24241a687e2
6ae22cfea44e67c33b00685bba765179fdd887ec
9e13d2eda87064408cf50417282a6d56c06a446433b84662d40fc209f21593ef
Analyzer Verdict Alert fortinet Phishing
GET /img/xnxHL8zVBjo.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:17 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 27 Aug 2022 10:36:59 GMT
Vary: Accept-Encoding
ETag: W/"6309f3cb-1dd75"
Expires: Sat, 10 Dec 2022 01:45:17 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AtAeihDz5unt5%2FCYtjZF%2BG9s%2FrF%2F2wh2HT0pqFem0q4kPtn9fO6AB5UnESkHkb9bLEqt3gggE8i8dsWf%2F3Xp5sRYQSJIfAaWV0FQFLwHvzFT5pqeqjvx6vvhgvDu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 776e2e2bbc7fb50c-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash e6be4d2155028ffff5d01ab6e7edf6da
07172071b5cf43c4cd7d7930b4ad8518ec1e32e9
4d8a5fa2362fd0910babd6d128d850d4460829468eb23d34ee5ee6eaa42d5a38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6174
Cache-Control: max-age=162271
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 13:45:18 GMT
Etag: "6392faaf-1d7"
Expires: Sun, 11 Dec 2022 10:49:49 GMT
Last-Modified: Fri, 09 Dec 2022 09:06:55 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
webhdkl.me/img/c_1vdG88uNh.woff2
200 OK 11 kB URL HTTP/1.1 webhdkl.me/img/c_1vdG88uNh.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 11016, version 1.0\012- data
Hash 15fa3062f8929bd3b05fdca5259db412
6ff06a34f68ad0324ddec1bbe4d453c959178b36
5d1bc9b443f3f81fa4b4ad4634c1bb9702194c1898e3a9de0ab5e2cdc0e9f479
Analyzer Verdict Alert fortinet Phishing
GET /img/c_1vdG88uNh.woff2 HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://webhdkl.me/img/28bZN702Ikw.css?_nc_x=Ij3Wp8lg5Kz
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:18 GMT
Content-Type: font/woff2
Content-Length: 11016
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:20:14 GMT
ETag: "6276018e-2b08"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pRksfV%2B%2BCziPJEm0FhQ0SrczFJXI4W%2BjvrY7WgMP8eWB%2FeSGlRbpermPjc4rTqvHw2zznZZVXzRxIAFk%2BI5wlBcD0eBoEYBqYzP6Uh7OHSSxlj4ynxcUOKba2r6s"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776e2e2f89b9b50c-OSL
alt-svc: h2=":443"; ma=60
webhdkl.me/36B424nhiL4.svg
200 OK 3.4 kB URL HTTP/1.1 webhdkl.me/36B424nhiL4.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (8730)
Hash 122f6201c827446667222bb74e486bc0
52e56bfa49055a85e91dcf106b03cf4c08b5a848
ae459adfabee25731f87ceb89e8b15839c8fd94aa48ef96348cf23b54d07eef3
Analyzer Verdict Alert fortinet Phishing
GET /36B424nhiL4.svg HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:18 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
ETag: W/"3a503900-221b"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QKv1YvxD3sCSI%2FCaogEtt84em9sGJ93L%2BJfrw%2FLfp0uyCYWTTiDV34j4ucQrHoLgPNi%2B7zUqRfUT0jkYRCXdDnvl1ZuK8g5b6sdi9ymOhFy3vPgqtIBaaIPFunuy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776e2e2f0b48b523-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
webhdkl.me/lOol7j-zq4u.svg
200 OK 1.2 kB URL HTTP/1.1 webhdkl.me/lOol7j-zq4u.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2647)
Hash b90c65920919f970414e43bd12fac5f5
41cca9ea22d40fc4904e62cfca9502c6799f6d82
abeb64fd191122c58d9cffc570c1db4b7597f328009e08f5aa3dc56772dc2213
Analyzer Verdict Alert fortinet Phishing
GET /lOol7j-zq4u.svg HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:18 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
ETag: W/"3a503900-a58"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A33hnY7YDoLdRaQQa%2B3riykKokXAZFfaGqQoVFOLTkj544ahY5gJ8Fn%2Bj0fvfXgfqQ6XNBcTjRcSp3NsCYNZ90wB7vSowijvFRPemZjKWCNC%2FGlbXoqoFgXTGs5o"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776e2e2f0e62fabc-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gMPhWW2iemcrxmk+zObFaw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aSBlngF9/o9uru3V2vZJPPeyn0c=
webhdkl.me/img/199550118_324755862565614_5691081457398710133_n.png?_nc_cat=1&ccb=1-5&_nc_sid=6825c5&_nc_ohc=jkhJ-ff6clcAX-7oczm&_nc_ht=scontent-cdg2-1.xx&oh=00_AT9tyhot38Im5sH8wAMWK_bpQcQDnqSijD5b5e9NoYm9ow&oe=62724F7B
200 OK 22 kB URL HTTP/1.1 webhdkl.me/img/199550118_324755862565614_5691081457398710133_n.png?_nc_cat=1&ccb=1-5&_nc_sid=6825c5&_nc_ohc=jkhJ-ff6clcAX-7oczm&_nc_ht=scontent-cdg2-1.xx&oh=00_AT9tyhot38Im5sH8wAMWK_bpQcQDnqSijD5b5e9NoYm9ow&oe=62724F7B
IP
File type PNG image data, 189 x 397, 8-bit colormap, non-interlaced\012- data
Hash e17f3235af4bd965dc0685b91c05472d
272000cdc612aab2f31cbd6f9dda31f3d094889c
cd899e99d525898009bc4673d29cf38ebdc2ddc6d14bd7263f2c53e322ef2ef4
GET /img/199550118_324755862565614_5691081457398710133_n.png?_nc_cat=1&ccb=1-5&_nc_sid=6825c5&_nc_ohc=jkhJ-ff6clcAX-7oczm&_nc_ht=scontent-cdg2-1.xx&oh=00_AT9tyhot38Im5sH8wAMWK_bpQcQDnqSijD5b5e9NoYm9ow&oe=62724F7B HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:18 GMT
Content-Type: image/png
Content-Length: 22023
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:20:11 GMT
ETag: "6276018b-5607"
Expires: Sun, 08 Jan 2023 13:45:18 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JashYEkN41Tz0dMSjamdZKEpIfbe0V6pemncn%2BpcQRyHBWaaYhZQ0purePgw%2FTcMJMApYIK88v9IVj%2B%2BadPVIVKLLNj34lSCuV%2FpdVucDVCLoo3ews0MjGQnRsa%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776e2e2f08deb529-OSL
alt-svc: h2=":443"; ma=60
webhdkl.me/img/199496234_481826579786653_2728461741738467210_n.png?_nc_cat=1&ccb=1-5&_nc_sid=6825c5&_nc_ohc=1B_cESBhwkUAX9wn8o4&_nc_ht=scontent-cdg2-1.xx&oh=00_AT81tdlI1QJJ55ORa5FrK6dbqoB6eU3mSQmNXyBLWUzo4A&oe=6270AE49
200 OK 22 kB URL HTTP/1.1 webhdkl.me/img/199496234_481826579786653_2728461741738467210_n.png?_nc_cat=1&ccb=1-5&_nc_sid=6825c5&_nc_ohc=1B_cESBhwkUAX9wn8o4&_nc_ht=scontent-cdg2-1.xx&oh=00_AT81tdlI1QJJ55ORa5FrK6dbqoB6eU3mSQmNXyBLWUzo4A&oe=6270AE49
IP
File type PNG image data, 215 x 397, 8-bit colormap, non-interlaced\012- data
Hash 853f5f9d1b1012720db015478e945f5f
7daee7f505749afbd8d2a07b8d55bfbb92297b48
736ec0b63c70e29a0dad38ffb5a2f40c1b66062ac2e31ee4c21e43f2890b00e2
GET /img/199496234_481826579786653_2728461741738467210_n.png?_nc_cat=1&ccb=1-5&_nc_sid=6825c5&_nc_ohc=1B_cESBhwkUAX9wn8o4&_nc_ht=scontent-cdg2-1.xx&oh=00_AT81tdlI1QJJ55ORa5FrK6dbqoB6eU3mSQmNXyBLWUzo4A&oe=6270AE49 HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:18 GMT
Content-Type: image/png
Content-Length: 22083
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:20:10 GMT
ETag: "6276018a-5643"
Expires: Sun, 08 Jan 2023 13:45:18 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h%2Bt4GEf%2FygnG9mpio0BWrKjwMmBQjKVARVq0cOKl34XNseJ9gUieWCuUJ4GlYiQthEEQ2yjiqSJHACUmg4dlV9McorHMZ6HO%2FK1Tgv3MWBUEiG7mjwCjOOxyRQJq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776e2e2f09a7fab4-OSL
alt-svc: h2=":443"; ma=60
webhdkl.me/img/zSaFQ46AO2w.woff2
200 OK 11 kB URL HTTP/1.1 webhdkl.me/img/zSaFQ46AO2w.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 11020, version 1.0\012- data
Hash a59072f933169d3f2db497f44ca4cbbe
5789e81a66958aabc7590c1ddd41058335636027
0d9fd7ccabde9b202de45ee6b65878ce9594975d8e8810b0878d3f3fa3637d0e
Analyzer Verdict Alert fortinet Phishing
GET /img/zSaFQ46AO2w.woff2 HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://webhdkl.me/img/28bZN702Ikw.css?_nc_x=Ij3Wp8lg5Kz
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:18 GMT
Content-Type: font/woff2
Content-Length: 11020
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:20:16 GMT
ETag: "62760190-2b0c"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mEbwjWP27V5uSCn%2F2pI8y%2BOU%2BZZEXCUk8YvxFtvjSuvw7%2BReVUT%2B049NbCjSDLvzjWXiLylvLPh47OJqHqPDiPYOFqyMEMM%2BmLvYXG1w6W7I2WRSpD7oAbV3mBUb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776e2e30ab78b50c-OSL
alt-svc: h2=":443"; ma=60
webhdkl.me/img/200489840_212859424015902_6843985089037031179_n.png?ccb=1-5&_nc_sid=2fbf2a&_nc_ohc=juYEDneC6ZwAX8BZDbQ&_nc_ht=scontent.whatsapp.net&oh=01_AVwTiAjyLXIN-Si27fk-6Emqqeg-vLnM5HBSbdXGng4itw&oe=627168B5
200 OK 57 kB URL HTTP/1.1 webhdkl.me/img/200489840_212859424015902_6843985089037031179_n.png?ccb=1-5&_nc_sid=2fbf2a&_nc_ohc=juYEDneC6ZwAX8BZDbQ&_nc_ht=scontent.whatsapp.net&oh=01_AVwTiAjyLXIN-Si27fk-6Emqqeg-vLnM5HBSbdXGng4itw&oe=627168B5
IP
File type PNG image data, 663 x 400, 8-bit colormap, non-interlaced\012- data
Hash 7211f8543d81d78973244e0c543dbeae
74cf91c5ddd035995bb50a659b5c6955c304f6c4
c230016694c1b4234b5b3330a1bb720efcc3152727ccde28ae63d9a89418cd24
GET /img/200489840_212859424015902_6843985089037031179_n.png?ccb=1-5&_nc_sid=2fbf2a&_nc_ohc=juYEDneC6ZwAX8BZDbQ&_nc_ht=scontent.whatsapp.net&oh=01_AVwTiAjyLXIN-Si27fk-6Emqqeg-vLnM5HBSbdXGng4itw&oe=627168B5 HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:18 GMT
Content-Type: image/png
Content-Length: 56702
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:20:11 GMT
ETag: "6276018b-dd7e"
Expires: Sun, 08 Jan 2023 13:45:18 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W02UrMxlC8GX1sJHCPvPZtzGEbNeWu9t6L1LZ9wmWiogzOB7XcWlIKtBPzZRhoxVIJ5wJAST%2B%2BqcS5Llvr%2FawQVUvuBXkKJZfpHHIwZ4oIAl%2F9%2BvvviFP5rbSdzo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776e2e2f08c10af6-OSL
alt-svc: h2=":443"; ma=60
webhdkl.me/img/RuiWHQ9HuZ-.woff2
200 OK 16 kB URL HTTP/1.1 webhdkl.me/img/RuiWHQ9HuZ-.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15872, version 1.0\012- data
Hash 020c97dc8e0463259c2f9df929bb0c69
8f956a31154047d1b6527b63db2ecf0f3a463f24
24369e1b2461af9dcefecaf9cc93d64cf22a4c5bac32506100b9e21014507bcf
Analyzer Verdict Alert fortinet Phishing
GET /img/RuiWHQ9HuZ-.woff2 HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://webhdkl.me/img/28bZN702Ikw.css?_nc_x=Ij3Wp8lg5Kz
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:18 GMT
Content-Type: font/woff2
Content-Length: 15872
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:20:15 GMT
ETag: "6276018f-3e00"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jtZKrlyIyo1fZ2rdgfZzK27rnkmlpyYL3TvMdbOhPF9uF2%2BGZSubaIiVtg2UPV7y43Y51jwWZ%2BwdboMAAWsR%2FhpWvy1skgqkmhTdoCMtTu1u%2Fb%2BzioySseQinHdM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776e2e313e0bb523-OSL
alt-svc: h2=":443"; ma=60
webhdkl.me/img/rYZqPCBaG70.png
200 OK 2.0 kB URL HTTP/1.1 webhdkl.me/img/rYZqPCBaG70.png
IP
File type PNG image data, 194 x 194, 8-bit colormap, non-interlaced\012- data
Hash 6bb288b8ba772471f23cee4f99b54c08
f72bf6750892a25cc40b590bafb2038109bd77ad
3899581abcfed9b40b7208bbbca8bdbfe3ae9655980dbf55f04dec9cb3309f27
GET /img/rYZqPCBaG70.png HTTP/1.1
Host: webhdkl.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://webhdkl.me/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 13:45:18 GMT
Content-Type: image/png
Content-Length: 2043
Connection: keep-alive
Last-Modified: Sat, 07 May 2022 05:20:15 GMT
ETag: "6276018f-7fb"
Expires: Sun, 08 Jan 2023 13:45:18 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yg%2BFQYqZkmlaTmQ6kj5ODWsZRC7KtLgQInB18AjdNmyceK3zuMmLQO87K9PoWtH2mWTpHP0aH3cLCeVoGPaiDJf9ZZX2amdC8p82b3NiHvm0iNSf4YEk%2FpGT%2BemK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 776e2e347a4bb523-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6234
Expires: Fri, 09 Dec 2022 15:29:13 GMT
Date: Fri, 09 Dec 2022 13:45:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6234
Expires: Fri, 09 Dec 2022 15:29:13 GMT
Date: Fri, 09 Dec 2022 13:45:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6234
Expires: Fri, 09 Dec 2022 15:29:13 GMT
Date: Fri, 09 Dec 2022 13:45:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6234
Expires: Fri, 09 Dec 2022 15:29:13 GMT
Date: Fri, 09 Dec 2022 13:45:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43fdc85bfd574fa803f0bcdc216ef622
27f558d5cdc150a50f080c054423500666b63d74
fafd2a81cddacdb4e5fd7c9963a784e6e56d06ac98f0bd4124fd74fa3ba015e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5245
x-amzn-requestid: 9770ebcd-fb1e-4b81-bb87-1e98ef024741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy-E8HugoAMFsKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911085-54eb7a48323113d52329abf5;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:15:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sVBYLtIioHYKROtAhiQ1BpQyuLqjBNlREaT22evfVPJ1fX1rzO-7WQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 22:39:52 GMT
age: 54327
etag: "27f558d5cdc150a50f080c054423500666b63d74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2654f7a6-bd8b-4c13-9c46-9b7582ba979a.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2654f7a6-bd8b-4c13-9c46-9b7582ba979a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06514ce96ae21cb01f526a5febdcbeb4
ebb97e5b97f394e8c67098f55581d5329ce819a2
4099a2fb6ddc4feaa30f357a180d64aeb7c9fc73f115fc762d5fe5c221d2e89e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2654f7a6-bd8b-4c13-9c46-9b7582ba979a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5169
x-amzn-requestid: 277a1b04-4e19-4313-8aac-5f9ab9076305
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEdkFGrIAMFvHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb456-5b21edd57297665012d536cc;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Xi-bshsYa4LlKbJgAt0h-lPnB_5uQbqln5JGBRE8io2Fp1y41cS9xg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 04:08:48 GMT
age: 34591
etag: "ebb97e5b97f394e8c67098f55581d5329ce819a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c3214044657f3b876d1f1848bca5684
7558222788f06623ddae6e883413e38e1146281e
e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:41:46 GMT
age: 36213
etag: "7558222788f06623ddae6e883413e38e1146281e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8546542f00ea29ef4df6ab8d3c7c2164
5c8ffe91490006a9890188b53f875568c2b6bd8f
7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6578
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4beGG7oAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: H067kZXU_djWxbWO34bYMqa0xZ-WF9ntEBhZ-kV_TDoJFXQL_J1hqQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:34:27 GMT
age: 36652
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fba9a3854df65740512f96efe7442e58
8fbff7725c842d70e047c635a725723a9dc9c55a
6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7Dp35PIr_WYUI1bBa21AvmCMEPi0d3jnhuS8eEk3Q3CXRcGWAnkD8g==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 17:01:04 GMT
age: 74655
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5de5d319f43d9c9c641419d96655541f
cde4c7fa0145d3645af17e34c83c63c08f76a076
fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7557
x-amzn-requestid: 400d1465-ecbf-4d95-8aa8-4dce5dca0716
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctluwGo4oAMFhTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee991-6dba29ae7065d5347a1a420d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:04:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Lazl-stakC-31gMuQ2WzH9uFkIb0g7HaaM3xkwSFdFJMWKTaKqrBEQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 04:07:07 GMT
age: 34692
etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
188.114.97.1
93.184.220.29
35.160.97.225
23.36.76.249