urlquery - report: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php

Passive DNS Source	Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
[Mnemonic Passive DNS]	contile.services.mozilla.com (1)	1114	No data	No data	34.117.237.239
[Mnemonic Passive DNS]	ocsp.digicert.com (1)	86	2012-11-29 12:49:49 UTC	2022-07-06 08:25:08 UTC	93.184.220.29
[Mnemonic Passive DNS]	push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2022-07-06 04:47:23 UTC	54.148.148.62
[Mnemonic Passive DNS]	ticaconnect.com (12)	0	No data	No data	103.169.67.104	Unknown ranking
[Mnemonic Passive DNS]	img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2022-07-06 04:16:26 UTC	34.120.237.76
[Mnemonic Passive DNS]	firefox.settings.services.mozilla.com (2)	867	2016-03-17 08:25:01 UTC	2020-05-25 20:01:47 UTC	54.230.111.65
[Mnemonic Passive DNS]	r3.o.lencr.org (6)	344	2020-12-02 08:52:13 UTC	2022-07-06 04:41:34 UTC	23.36.76.226
[Mnemonic Passive DNS]	content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-07-06 04:55:23 UTC	54.230.111.99

Date	UQ / IDS / BL	URL	IP
2022-07-08 14:10:39 +0000	0 - 0 - 2	ticaconnect.com/	103.169.67.104
2022-07-07 06:20:44 +0000	0 - 0 - 3	ticaconnect.com/wp-content/plugins/bzviuon/Ce (...)	103.169.67.104
2022-07-07 00:05:58 +0000	0 - 0 - 3	https://ticaconnect.com/wp-content/plugins/bz (...)	103.169.67.104
2022-07-06 19:55:50 +0000	0 - 0 - 1	https://ticaconnect.com/wp-content/plugins/bz (...)	103.169.67.104
2022-07-06 15:36:23 +0000	0 - 0 - 3	ticaconnect.com/wp-content/plugins/bzviuon/Ce (...)	103.169.67.104
2022-07-06 09:43:45 +0000	0 - 0 - 2	ticaconnect.com/wp-content/plugins/bzviuon/Ce (...)	103.169.67.104

Date	UQ / IDS / BL	URL	IP
2022-08-12 22:20:02 +0000	0 - 0 - 3	scglobal.co.th/e-catalogue/oynn-6tut6-amuq/	45.64.187.214
2022-08-12 16:05:51 +0000	0 - 0 - 3	scglobal.co.th/e-catalogue/oynn-6tut6-amuq/	45.64.187.214
2022-08-12 09:51:45 +0000	0 - 0 - 3	scglobal.co.th/e-catalogue/oynn-6tut6-amuq/	45.64.187.214
2022-08-12 03:39:07 +0000	0 - 0 - 3	scglobal.co.th/e-catalogue/oynn-6tut6-amuq/	45.64.187.214
2022-08-11 21:29:28 +0000	0 - 0 - 3	scglobal.co.th/e-catalogue/oynn-6tut6-amuq/	45.64.187.214
2022-08-11 15:17:05 +0000	0 - 0 - 3	scglobal.co.th/e-catalogue/oynn-6tut6-amuq/	45.64.187.214
2022-08-11 09:09:00 +0000	0 - 0 - 3	scglobal.co.th/e-catalogue/oynn-6tut6-amuq/	45.64.187.214
2022-08-11 03:01:30 +0000	0 - 0 - 3	scglobal.co.th/e-catalogue/oynn-6tut6-amuq/	45.64.187.214
2022-08-10 04:44:31 +0000	0 - 0 - 12	welovechonburi.com/	45.64.185.141
2022-08-09 22:19:47 +0000	0 - 0 - 10	rhsschool.ac.th/	45.64.185.141

Date	UQ / IDS / BL	URL	IP
2022-07-15 02:18:30 +0000	0 - 0 - 1	ticaconnect.com/	116.204.180.189
2022-07-15 02:18:29 +0000	0 - 0 - 1	ticaconnect.com/	116.204.180.189
2022-07-08 14:10:39 +0000	0 - 0 - 2	ticaconnect.com/	103.169.67.104
2022-07-07 06:20:44 +0000	0 - 0 - 3	ticaconnect.com/wp-content/plugins/bzviuon/Ce (...)	103.169.67.104
2022-07-07 00:05:58 +0000	0 - 0 - 3	https://ticaconnect.com/wp-content/plugins/bz (...)	103.169.67.104
2022-07-06 19:55:50 +0000	0 - 0 - 1	https://ticaconnect.com/wp-content/plugins/bz (...)	103.169.67.104
2022-07-06 15:36:23 +0000	0 - 0 - 3	ticaconnect.com/wp-content/plugins/bzviuon/Ce (...)	103.169.67.104
2022-07-06 09:43:45 +0000	0 - 0 - 2	ticaconnect.com/wp-content/plugins/bzviuon/Ce (...)	103.169.67.104

Request	Response
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 91dd975a7b17b2922dd23c0e49314e40$ 54.230.111.65 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Wed, 06 Jul 2022 13:56:06 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: sIAj4sopUHY_QrQa0ncW_14QVZlx64QB28BKV3Adg0MsT676Td7trQ== Age: 555 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 91dd975a7b17b2922dd23c0e49314e40 Sha1: 57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2 Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "5CA12512DFBE8A007255191678A4ECD570026D865AE741C0D3025D8FE1A58659" Last-Modified: Mon, 04 Jul 2022 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11591 Expires: Wed, 06 Jul 2022 17:18:32 GMT Date: Wed, 06 Jul 2022 14:05:21 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 65822db7ce56247876fbdcc5c29607f6 Sha1: 91262a33683099ad0dc3631d0a7a9051d8539b20 Sha256: 5ca12512dfbe8a007255191678a4ecd570026d865ae741c0d3025d8fe1a58659
GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	$Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 581454acdd98f34fd3fbabd0977ade29$ 54.230.111.99 HTTP/2 200 OK content-type: binary/octet-stream content-length: 5348 last-modified: Tue, 21 Jun 2022 12:10:22 GMT content-disposition: attachment accept-ranges: bytes server: AmazonS3 date: Wed, 06 Jul 2022 03:26:46 GMT etag: "581454acdd98f34fd3fbabd0977ade29" x-cache: Hit from cloudfront via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: xmcNdM6w9lEDN9U1ugaOWyboH8UPEgeglRUcKxpcOi6Amb5H8HEvww== age: 38316 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 581454acdd98f34fd3fbabd0977ade29 Sha1: d8d86c0b513137aeb85de01cea7b272c35eb6ab4 Sha256: e98f8f33ba5ed59c3cfdf2ae54957ed32652cf0899f3c8db4b5872e3ece1e4eb
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6$ 34.117.237.239 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:21 GMT content-type: application/json content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "952E955CF4ACC9939D43E7883858B883273F4CFC3FC6230D0617487D1386E7C2" Last-Modified: Tue, 05 Jul 2022 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5843 Expires: Wed, 06 Jul 2022 15:42:44 GMT Date: Wed, 06 Jul 2022 14:05:21 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: b952f8b5785f03b8a751b6e48b9fc45a Sha1: 4eae55b7d33dbfea87ef9bad8b45216cfe252128 Sha256: 952e955cf4acc9939d43e7883858b883273f4cfc3fc6230d0617487d1386e7c2
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243$ 54.230.111.65 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After, ETag, Content-Type, Last-Modified, Alert, Backoff, Pragma, Expires, Content-Length, Cache-Control Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Cache-Control: max-age=3600 Date: Wed, 06 Jul 2022 13:34:56 GMT Expires: Wed, 06 Jul 2022 13:56:36 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: 9QlHT16TbHGFLzgR5FcdE0i7Kgeu-G9Z2hWVEQAc-wyqng4ffWdnfA== Age: 1825 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3770 Cache-Control: 'max-age=158059' Date: Wed, 06 Jul 2022 14:05:22 GMT Last-Modified: Wed, 06 Jul 2022 13:02:32 GMT Server: ECS (ska/F711) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 54a5ebdb4e3b060878632555583e462f Sha1: df627b311d6276eabf36fe1390a8219714839aed Sha256: 5c77d20265a9a328455b745ec5191e036ec35814586c1e6bcd1c8b2de01b3ff2
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: E8z8NSw2Sp/Pq3ggr9viyQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	54.148.148.62 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: ezEaINEQ5alBUDMX7A3lHJKVhdU= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/top-header-left.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 582 x 46, 8-bit/color RGBA, non-interlaced\012- data Size: 7766 Md5: 05d0bcebf3df7ee2a73dee6cded8748c$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:22 GMT content-type: image/png content-length: 7766 last-modified: Tue, 14 Apr 2020 19:50:36 GMT etag: "5e96140c-1e56" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 582 x 46, 8-bit/color RGBA, non-interlaced\012- data Size: 7766 Md5: 05d0bcebf3df7ee2a73dee6cded8748c Sha1: 3a2063b7ea5f324dfba774b9cf2671480f387fd3 Sha256: 004c0d90d64d9266498f39a020a0a6fe4110b94f8447daea5b1373d3e7934aad
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/top-header-left2.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 83 x 41, 8-bit/color RGB, non-interlaced\012- data Size: 1402 Md5: 6c8bd7116fa86f2ae3c0180d903925ef$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:22 GMT content-type: image/png content-length: 1402 last-modified: Tue, 14 Apr 2020 20:01:14 GMT etag: "5e96168a-57a" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 83 x 41, 8-bit/color RGB, non-interlaced\012- data Size: 1402 Md5: 6c8bd7116fa86f2ae3c0180d903925ef Sha1: bf8ddfd792a103dc6d5aacd11e9d903072684c70 Sha256: c96109fef3e6ae0c4dffe3fcc9026352c44a2147b9fd2c4d6e08d32cdcf2641f
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/top-header-right.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 165 x 12, 8-bit/color RGBA, non-interlaced\012- data Size: 3223 Md5: a807d65c0c9d3f695f10e08980bc1b51$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:22 GMT content-type: image/png content-length: 3223 last-modified: Tue, 14 Apr 2020 19:51:06 GMT etag: "5e96142a-c97" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 165 x 12, 8-bit/color RGBA, non-interlaced\012- data Size: 3223 Md5: a807d65c0c9d3f695f10e08980bc1b51 Sha1: e1fa5b9f089087d9b0c94dfc1557d6de22fb6b8e Sha256: 5b6cd7b81854519965959d1549226e565a77de441a694df48579868348513d21
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/header-left.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 481 x 70, 8-bit/color RGBA, non-interlaced\012- data Size: 13753 Md5: 7d9605f1532c3522c8bcbb0f29365c33$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:22 GMT content-type: image/png content-length: 13753 last-modified: Tue, 14 Apr 2020 19:52:16 GMT etag: "5e961470-35b9" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 481 x 70, 8-bit/color RGBA, non-interlaced\012- data Size: 13753 Md5: 7d9605f1532c3522c8bcbb0f29365c33 Sha1: 01d4c9d444aa4f64223febe842a7d1d371215dd1 Sha256: c83e6ec9b5ceece6db819192b3f6f877fc64296b1ed27ec5b53cc5c4d86f8ab4
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/logo.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data Size: 6360 Md5: 25722a7e1f0c794ae8b299897c61a03b$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:22 GMT content-type: image/png content-length: 6360 last-modified: Tue, 14 Apr 2020 19:53:12 GMT etag: "5e9614a8-18d8" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced\012- data Size: 6360 Md5: 25722a7e1f0c794ae8b299897c61a03b Sha1: 8657666cb41fd8fcd3e0202bb9c3327fba3f837f Sha256: f0f02c834c71eff3c9dbc749f81ea8be9c213326a6908e7b80a7da9cba637ae3
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/header-right.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 383 x 50, 8-bit/color RGBA, non-interlaced\012- Minix filesystem, V1 (big endian), 8916 zones\012- data Size: 4864 Md5: 2375d45e3a3f1902e9e5e3509b729ab0$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:22 GMT content-type: image/png content-length: 4864 last-modified: Tue, 14 Apr 2020 19:52:46 GMT etag: "5e96148e-1300" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 383 x 50, 8-bit/color RGBA, non-interlaced\012- Minix filesystem, V1 (big endian), 8916 zones\012- data Size: 4864 Md5: 2375d45e3a3f1902e9e5e3509b729ab0 Sha1: 611da0b1ef30ce60cb99fc53e8f4e68e2c4b89a6 Sha256: dc76d1d3963947047b414b58209d235ff6e36043fe66514606a260a8c3d96cb0
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/header-right2.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 503 x 50, 8-bit/color RGB, non-interlaced\012- data Size: 4897 Md5: 9252aa94fff77064c1ff6bcc5b7398dd$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:22 GMT content-type: image/png content-length: 4897 last-modified: Tue, 14 Apr 2020 19:54:08 GMT etag: "5e9614e0-1321" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 503 x 50, 8-bit/color RGB, non-interlaced\012- data Size: 4897 Md5: 9252aa94fff77064c1ff6bcc5b7398dd Sha1: b4ff8e78716f29cccb54b70906794a44fd7a1a21 Sha256: 37a288f0c7a73fecda634b2262ba8d7c23953e2268aa9a6dabc21955b5a174e9
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/header-right3.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 228 x 50, 8-bit/color RGB, non-interlaced\012- data Size: 1187 Md5: f2766a53f341aa32b32efef5152cb92b$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:22 GMT content-type: image/png content-length: 1187 last-modified: Tue, 14 Apr 2020 19:55:04 GMT etag: "5e961518-4a3" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 228 x 50, 8-bit/color RGB, non-interlaced\012- data Size: 1187 Md5: f2766a53f341aa32b32efef5152cb92b Sha1: 472e5b58d6f177a1dae8c272b209aa0a4c7c2731 Sha256: f209ec1d94d89a8fa9cdadffa82ac9f6bb696687d21caaf0a15007199fdbcbfc
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D" Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15163 Expires: Wed, 06 Jul 2022 18:18:06 GMT Date: Wed, 06 Jul 2022 14:05:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 88b14e7d8e8c06a7fbc94b02217857ad Sha1: 034816601b832f18309ab4c047269b31a96cc971 Sha256: 611e864d4a64eb7175bded94052a41462e3215d329ef82cbeea70d511b811e8d
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D" Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15163 Expires: Wed, 06 Jul 2022 18:18:06 GMT Date: Wed, 06 Jul 2022 14:05:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 88b14e7d8e8c06a7fbc94b02217857ad Sha1: 034816601b832f18309ab4c047269b31a96cc971 Sha256: 611e864d4a64eb7175bded94052a41462e3215d329ef82cbeea70d511b811e8d
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D" Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15163 Expires: Wed, 06 Jul 2022 18:18:06 GMT Date: Wed, 06 Jul 2022 14:05:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 88b14e7d8e8c06a7fbc94b02217857ad Sha1: 034816601b832f18309ab4c047269b31a96cc971 Sha256: 611e864d4a64eb7175bded94052a41462e3215d329ef82cbeea70d511b811e8d
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D" Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15163 Expires: Wed, 06 Jul 2022 18:18:06 GMT Date: Wed, 06 Jul 2022 14:05:23 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 88b14e7d8e8c06a7fbc94b02217857ad Sha1: 034816601b832f18309ab4c047269b31a96cc971 Sha256: 611e864d4a64eb7175bded94052a41462e3215d329ef82cbeea70d511b811e8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3138a2a5-6ce8-4465-8dff-7307ebdd802f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13276 Md5: 95aa230a6b516a252f3815c586803c15$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 13276 x-amzn-requestid: 33881d12-a991-437c-90a2-4c00d31642b8 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: UUXHsFwoIAMFqkg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62b80564-15ff67dd1eee173c5730daf4;Sampled=0 x-amzn-remapped-date: Sun, 26 Jun 2022 07:06:12 GMT x-amz-cf-pop: SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: jqKUpQrSzmKObwwVi8gqnNdDGPhy70oWIIQ8xtK_1BXQIBhTdB1mow== via: 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google date: Wed, 06 Jul 2022 04:37:49 GMT age: 34054 etag: "7e5a550bbbac49269cae75ce9bb92e8fdf77b086" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13276 Md5: 95aa230a6b516a252f3815c586803c15 Sha1: 7e5a550bbbac49269cae75ce9bb92e8fdf77b086 Sha256: fc3c49de063a4e13c64e799664fa6c7ccf6e42aac5973aaf1af2b7689338f3b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1720044-e013-44e2-84e3-3257a39ccd02.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5911 Md5: 3d1458480bd23c2411fa6de7ae666502$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 5911 x-amzn-requestid: fe59dc2c-e538-4a53-89cc-124a1ef18ae4 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: U0B0QFbBoAMFrYg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c4b01b-52093f724a31401a2104b0ea;Sampled=0 x-amzn-remapped-date: Tue, 05 Jul 2022 21:41:47 GMT x-amz-cf-pop: SEA73-P2, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: 5m4ltu42g95fcokh1RQ05zAj4rSzrTZqqZKzaG6LwUvFVc3DqXsIqw== via: 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google date: Tue, 05 Jul 2022 21:50:40 GMT age: 58483 etag: "207e445452ff97110a4c9edd38bc8933f70fd71e" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5911 Md5: 3d1458480bd23c2411fa6de7ae666502 Sha1: 207e445452ff97110a4c9edd38bc8933f70fd71e Sha256: c29b4c3afdf7843b5f26688ed8dee581ec08c767569f3f0a99c3b22f9825a966
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bb6c586-bb86-4a54-bd48-f2b5da763e74.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7117 Md5: b4ead2bdcbc998a5685d65a26e40ce1a$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 7117 x-amzn-requestid: 7cfe344b-f098-4260-bb50-6574786e6ee2 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: U0BW8HnbIAMFkrA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c4af5f-14a960ac060d2d120cb0ad7c;Sampled=0 x-amzn-remapped-date: Tue, 05 Jul 2022 21:38:39 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: 0F6ZVkqKywgjh9Qa1DJw_-rdOLcc1tzEll0J58NeawksoIu9nY1a-g== via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google date: Tue, 05 Jul 2022 21:52:41 GMT age: 58362 etag: "01efbdf6b2ab79332bf6a22d36472e294732aa17" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7117 Md5: b4ead2bdcbc998a5685d65a26e40ce1a Sha1: 01efbdf6b2ab79332bf6a22d36472e294732aa17 Sha256: 04399a91345db4f89bdbbb9ddb30db0f2a0c29654491b38bb1a30bd40c4f3e48
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a269baa-7158-4db8-9b1d-e4e22ec22920.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6711 Md5: d82ae97bb9569fa288a23c3380a4f4ef$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 6711 x-amzn-requestid: 5b99a31c-9224-4862-a43f-544d6fa3dbdd x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: U0BHsEkmIAMFg_Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c4aefd-571078525a01c4dc72c6ed22;Sampled=0 x-amzn-remapped-date: Tue, 05 Jul 2022 21:37:01 GMT x-amz-cf-pop: SEA19-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: 8xhNMjh4EBZQrViDk4PaxV5Tk_sBuZ1BGRuVGtAVAGie72R16hmoAA== via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google date: Tue, 05 Jul 2022 21:37:02 GMT etag: "b06f33b2742c3c6de4a449f4227d85e6268bafce" content-type: image/jpeg age: 59301 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6711 Md5: d82ae97bb9569fa288a23c3380a4f4ef Sha1: b06f33b2742c3c6de4a449f4227d85e6268bafce Sha256: e99961f561aaa3ded5fd1c19ce10505a7d016d5d67bbbef5caebad09ba233b56
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc072e61d-3b9b-4f2d-acc8-d26a8adf968d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12165 Md5: 29949330f4dc3b69747d5534e745fde3$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 12165 x-amzn-requestid: 796ca673-2ab5-4bd9-b4f1-d2c250c34e3a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: U0BWXH-HoAMFhkg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c4af5b-51c7abd54a523a1f479a7d5b;Sampled=0 x-amzn-remapped-date: Tue, 05 Jul 2022 21:38:35 GMT x-amz-cf-pop: SEA19-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: _-zkK-6DIfDVDzXmTOTigF2tM4pfh19MReGO_X26eRhLNFGL3Jc9Aw== via: 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google date: Tue, 05 Jul 2022 21:50:29 GMT age: 58494 etag: "604b4cc5d50ca494df1de2ab8baa486da20d1e4e" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 12165 Md5: 29949330f4dc3b69747d5534e745fde3 Sha1: 604b4cc5d50ca494df1de2ab8baa486da20d1e4e Sha256: b98faa2080573124f84254a2f87df3631f257e9a040cf34ebe267a1784d4b954
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde8f4008-69f3-4766-a957-006ebc39d2e4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	$Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9047 Md5: bb2f16af747cd633f71de1966771b532$ 34.120.237.76 HTTP/2 200 OK server: nginx content-length: 9047 x-amzn-requestid: 8e0eccf9-7f3e-4333-a5d7-a35dd0e068eb x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: U0BU0HNmoAMFaQA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-62c4af51-1d81f8e10200694125ede95f;Sampled=0 x-amzn-remapped-date: Tue, 05 Jul 2022 21:38:25 GMT x-amz-cf-pop: SEA19-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: p01XdrlrorzmgxXBsOJnDXZr2H4NK0kTKLw9EwA5gpq_BlyCwaub2A== via: 1.1 1002c05e647d0804e83147cdd205d14a.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google date: Tue, 05 Jul 2022 21:50:18 GMT age: 58505 etag: "7aa6cd994a565c8b6832d48c1e36b17f33621e90" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9047 Md5: bb2f16af747cd633f71de1966771b532 Sha1: 7aa6cd994a565c8b6832d48c1e36b17f33621e90 Sha256: b61a354007e630a3be3ae0c2c2336d3dd71cec02eab7b4234ebb40f69561acf0
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/fonts/secure-asterisk.woff HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/css/fonts.css Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: Web Open Font Format, TrueType, length 3176, version 0.0\012- data Size: 3176 Md5: 374b020a914ea198d75d783535440a81$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:23 GMT content-type: application/octet-stream content-length: 3176 last-modified: Wed, 19 Feb 2020 11:02:32 GMT etag: "5e4d15c8-c68" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format, TrueType, length 3176, version 0.0\012- data Size: 3176 Md5: 374b020a914ea198d75d783535440a81 Sha1: 2dd183915d84f1a8deee4fdb1091af1cd2989e25 Sha256: cc0b81d5e663b8abed0d6035739f40950ae99bcabb9a88f1e92eb910ae769cea Alerts: Blocklists: - fortinet: Phishing
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/footer.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 907 x 595, 8-bit/color RGBA, non-interlaced\012- data Size: 53035 Md5: f96a98795792fd92b817f70089d30c31$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:22 GMT content-type: image/png content-length: 53035 last-modified: Tue, 14 Apr 2020 19:49:54 GMT etag: "5e9613e2-cf2b" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 907 x 595, 8-bit/color RGBA, non-interlaced\012- data Size: 53035 Md5: f96a98795792fd92b817f70089d30c31 Sha1: b2ca6b578360c9f67c6af13a25568ac31fb08f7b Sha256: 5bb399100f821a7bada7a8faa36de1e64dd19bcde8854eb9980b5b07cb74de1c
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/content.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/css/main.css Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 939 x 2166, 8-bit/color RGBA, non-interlaced\012- data Size: 461751 Md5: a163946bb2c40cfce6b8eb1f7c5a4f63$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:23 GMT content-type: image/png content-length: 461751 last-modified: Tue, 14 Apr 2020 19:49:02 GMT etag: "5e9613ae-70bb7" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 939 x 2166, 8-bit/color RGBA, non-interlaced\012- data Size: 461751 Md5: a163946bb2c40cfce6b8eb1f7c5a4f63 Sha1: 77405f7e4c20b1e6088ec70c468edacda7638aac Sha256: 8f7220fde4861e61d5d1f84538771bf385a161f5889476028a61341ac01875d0
GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/favicon.png HTTP/1.1 Host: ticaconnect.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	$Magic: PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data Size: 2817 Md5: 95148d7f825922493ef706dd98457ff4$ 103.169.67.104 HTTP/2 200 OK server: nginx date: Wed, 06 Jul 2022 14:05:27 GMT content-type: image/png content-length: 2817 last-modified: Tue, 14 Apr 2020 21:09:20 GMT etag: "5e962680-b01" expires: Thu, 31 Dec 2037 23:55:55 GMT cache-control: max-age=315360000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data Size: 2817 Md5: 95148d7f825922493ef706dd98457ff4 Sha1: a0a5b1c2f52bb002000a04de5aa74d8ed25fc703 Sha256: c78d2b529472912245060a36f2393b664716b51511b6bdcfa385fba224ba3811

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         
                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "5CA12512DFBE8A007255191678A4ECD570026D865AE741C0D3025D8FE1A58659" 

                                        
                                            
Last-Modified: Mon, 04 Jul 2022 04:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=11591 

                                        
                                            
Expires: Wed, 06 Jul 2022 17:18:32 GMT 

                                        
                                            
Date: Wed, 06 Jul 2022 14:05:21 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    65822db7ce56247876fbdcc5c29607f6

                                                Sha1:   91262a33683099ad0dc3631d0a7a9051d8539b20

                                                Sha256: 5ca12512dfbe8a007255191678a4ecd570026d865ae741c0d3025d8fe1a58659

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 06 Jul 2022 14:05:21 GMT 

                                        
                                            
content-type: application/json 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 329 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Retry-After, ETag, Content-Type, Last-Modified, Alert, Backoff, Pragma, Expires, Content-Length, Cache-Control 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Date: Wed, 06 Jul 2022 13:34:56 GMT 

                                        
                                            
Expires: Wed, 06 Jul 2022 13:56:36 GMT 

                                        
                                            
ETag: "1648230346554" 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-P1 

                                        
                                            
X-Amz-Cf-Id: 9QlHT16TbHGFLzgR5FcdE0i7Kgeu-G9Z2hWVEQAc-wyqng4ffWdnfA== 

                                        
                                            
Age: 1825 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: E8z8NSw2Sp/Pq3ggr9viyQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         
                                         54.148.148.62

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: ezEaINEQ5alBUDMX7A3lHJKVhdU= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/top-header-left2.png HTTP/1.1 

                                        
                                            
Host: ticaconnect.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php 

                                        
                                            
Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         
                                         103.169.67.104

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 06 Jul 2022 14:05:22 GMT 

                                        
                                            
content-type: image/png 

                                        
                                            
content-length: 1402 

                                        
                                            
last-modified: Tue, 14 Apr 2020 20:01:14 GMT 

                                        
                                            
etag: "5e96168a-57a" 

                                        
                                            
expires: Thu, 31 Dec 2037 23:55:55 GMT 

                                        
                                            
cache-control: max-age=315360000 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 83 x 41, 8-bit/color RGB, non-interlaced\012- data

                                                Size:   1402

                                                Md5:    6c8bd7116fa86f2ae3c0180d903925ef

                                                Sha1:   bf8ddfd792a103dc6d5aacd11e9d903072684c70

                                                Sha256: c96109fef3e6ae0c4dffe3fcc9026352c44a2147b9fd2c4d6e08d32cdcf2641f

                                        
                                            GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/header-left.png HTTP/1.1 

                                        
                                            
Host: ticaconnect.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php 

                                        
                                            
Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         
                                         103.169.67.104

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 06 Jul 2022 14:05:22 GMT 

                                        
                                            
content-type: image/png 

                                        
                                            
content-length: 13753 

                                        
                                            
last-modified: Tue, 14 Apr 2020 19:52:16 GMT 

                                        
                                            
etag: "5e961470-35b9" 

                                        
                                            
expires: Thu, 31 Dec 2037 23:55:55 GMT 

                                        
                                            
cache-control: max-age=315360000 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 481 x 70, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   13753

                                                Md5:    7d9605f1532c3522c8bcbb0f29365c33

                                                Sha1:   01d4c9d444aa4f64223febe842a7d1d371215dd1

                                                Sha256: c83e6ec9b5ceece6db819192b3f6f877fc64296b1ed27ec5b53cc5c4d86f8ab4

                                        
                                            GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/header-right.png HTTP/1.1 

                                        
                                            
Host: ticaconnect.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php 

                                        
                                            
Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         
                                         103.169.67.104

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 06 Jul 2022 14:05:22 GMT 

                                        
                                            
content-type: image/png 

                                        
                                            
content-length: 4864 

                                        
                                            
last-modified: Tue, 14 Apr 2020 19:52:46 GMT 

                                        
                                            
etag: "5e96148e-1300" 

                                        
                                            
expires: Thu, 31 Dec 2037 23:55:55 GMT 

                                        
                                            
cache-control: max-age=315360000 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 383 x 50, 8-bit/color RGBA, non-interlaced\012-  Minix filesystem, V1 (big endian), 8916 zones\012- data

                                                Size:   4864

                                                Md5:    2375d45e3a3f1902e9e5e3509b729ab0

                                                Sha1:   611da0b1ef30ce60cb99fc53e8f4e68e2c4b89a6

                                                Sha256: dc76d1d3963947047b414b58209d235ff6e36043fe66514606a260a8c3d96cb0

                                        
                                            GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/header-right3.png HTTP/1.1 

                                        
                                            
Host: ticaconnect.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php 

                                        
                                            
Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         
                                         103.169.67.104

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 06 Jul 2022 14:05:22 GMT 

                                        
                                            
content-type: image/png 

                                        
                                            
content-length: 1187 

                                        
                                            
last-modified: Tue, 14 Apr 2020 19:55:04 GMT 

                                        
                                            
etag: "5e961518-4a3" 

                                        
                                            
expires: Thu, 31 Dec 2037 23:55:55 GMT 

                                        
                                            
cache-control: max-age=315360000 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 228 x 50, 8-bit/color RGB, non-interlaced\012- data

                                                Size:   1187

                                                Md5:    f2766a53f341aa32b32efef5152cb92b

                                                Sha1:   472e5b58d6f177a1dae8c272b209aa0a4c7c2731

                                                Sha256: f209ec1d94d89a8fa9cdadffa82ac9f6bb696687d21caaf0a15007199fdbcbfc

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         
                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D" 

                                        
                                            
Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=15163 

                                        
                                            
Expires: Wed, 06 Jul 2022 18:18:06 GMT 

                                        
                                            
Date: Wed, 06 Jul 2022 14:05:23 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    88b14e7d8e8c06a7fbc94b02217857ad

                                                Sha1:   034816601b832f18309ab4c047269b31a96cc971

                                                Sha256: 611e864d4a64eb7175bded94052a41462e3215d329ef82cbeea70d511b811e8d

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         
                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "611E864D4A64EB7175BDED94052A41462E3215D329EF82CBEEA70D511B811E8D" 

                                        
                                            
Last-Modified: Mon, 04 Jul 2022 07:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=15163 

                                        
                                            
Expires: Wed, 06 Jul 2022 18:18:06 GMT 

                                        
                                            
Date: Wed, 06 Jul 2022 14:05:23 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    88b14e7d8e8c06a7fbc94b02217857ad

                                                Sha1:   034816601b832f18309ab4c047269b31a96cc971

                                                Sha256: 611e864d4a64eb7175bded94052a41462e3215d329ef82cbeea70d511b811e8d

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1720044-e013-44e2-84e3-3257a39ccd02.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 5911 

                                        
                                            
x-amzn-requestid: fe59dc2c-e538-4a53-89cc-124a1ef18ae4 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: U0B0QFbBoAMFrYg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-62c4b01b-52093f724a31401a2104b0ea;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 05 Jul 2022 21:41:47 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P2, SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: 5m4ltu42g95fcokh1RQ05zAj4rSzrTZqqZKzaG6LwUvFVc3DqXsIqw== 

                                        
                                            
via: 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 05 Jul 2022 21:50:40 GMT 

                                        
                                            
age: 58483 

                                        
                                            
etag: "207e445452ff97110a4c9edd38bc8933f70fd71e" 

                                        
                                            
content-type: image/jpeg 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5911

                                                Md5:    3d1458480bd23c2411fa6de7ae666502

                                                Sha1:   207e445452ff97110a4c9edd38bc8933f70fd71e

                                                Sha256: c29b4c3afdf7843b5f26688ed8dee581ec08c767569f3f0a99c3b22f9825a966

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a269baa-7158-4db8-9b1d-e4e22ec22920.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6711 

                                        
                                            
x-amzn-requestid: 5b99a31c-9224-4862-a43f-544d6fa3dbdd 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: U0BHsEkmIAMFg_Q= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-62c4aefd-571078525a01c4dc72c6ed22;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 05 Jul 2022 21:37:01 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: 8xhNMjh4EBZQrViDk4PaxV5Tk_sBuZ1BGRuVGtAVAGie72R16hmoAA== 

                                        
                                            
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 05 Jul 2022 21:37:02 GMT 

                                        
                                            
etag: "b06f33b2742c3c6de4a449f4227d85e6268bafce" 

                                        
                                            
content-type: image/jpeg 

                                        
                                            
age: 59301 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6711

                                                Md5:    d82ae97bb9569fa288a23c3380a4f4ef

                                                Sha1:   b06f33b2742c3c6de4a449f4227d85e6268bafce

                                                Sha256: e99961f561aaa3ded5fd1c19ce10505a7d016d5d67bbbef5caebad09ba233b56

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde8f4008-69f3-4766-a957-006ebc39d2e4.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9047 

                                        
                                            
x-amzn-requestid: 8e0eccf9-7f3e-4333-a5d7-a35dd0e068eb 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: U0BU0HNmoAMFaQA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-62c4af51-1d81f8e10200694125ede95f;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 05 Jul 2022 21:38:25 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: p01XdrlrorzmgxXBsOJnDXZr2H4NK0kTKLw9EwA5gpq_BlyCwaub2A== 

                                        
                                            
via: 1.1 1002c05e647d0804e83147cdd205d14a.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 05 Jul 2022 21:50:18 GMT 

                                        
                                            
age: 58505 

                                        
                                            
etag: "7aa6cd994a565c8b6832d48c1e36b17f33621e90" 

                                        
                                            
content-type: image/jpeg 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9047

                                                Md5:    bb2f16af747cd633f71de1966771b532

                                                Sha1:   7aa6cd994a565c8b6832d48c1e36b17f33621e90

                                                Sha256: b61a354007e630a3be3ae0c2c2336d3dd71cec02eab7b4234ebb40f69561acf0

                                        
                                            GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/footer.png HTTP/1.1 

                                        
                                            
Host: ticaconnect.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php 

                                        
                                            
Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         
                                         103.169.67.104

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 06 Jul 2022 14:05:22 GMT 

                                        
                                            
content-type: image/png 

                                        
                                            
content-length: 53035 

                                        
                                            
last-modified: Tue, 14 Apr 2020 19:49:54 GMT 

                                        
                                            
etag: "5e9613e2-cf2b" 

                                        
                                            
expires: Thu, 31 Dec 2037 23:55:55 GMT 

                                        
                                            
cache-control: max-age=315360000 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 907 x 595, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   53035

                                                Md5:    f96a98795792fd92b817f70089d30c31

                                                Sha1:   b2ca6b578360c9f67c6af13a25568ac31fb08f7b

                                                Sha256: 5bb399100f821a7bada7a8faa36de1e64dd19bcde8854eb9980b5b07cb74de1c

                                        
                                            GET /wp-content/plugins/bzviuon/CerticodePlus/DSP2/assets/images/favicon.png HTTP/1.1 

                                        
                                            
Host: ticaconnect.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php 

                                        
                                            
Cookie: PHPSESSID=l353tjn5ftpdtq1hnapdpndqj9 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         
                                         103.169.67.104

                                        
                                            HTTP/2 200 OK

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 06 Jul 2022 14:05:27 GMT 

                                        
                                            
content-type: image/png 

                                        
                                            
content-length: 2817 

                                        
                                            
last-modified: Tue, 14 Apr 2020 21:09:20 GMT 

                                        
                                            
etag: "5e962680-b01" 

                                        
                                            
expires: Thu, 31 Dec 2037 23:55:55 GMT 

                                        
                                            
cache-control: max-age=315360000 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data

                                                Size:   2817

                                                Md5:    95148d7f825922493ef706dd98457ff4

                                                Sha1:   a0a5b1c2f52bb002000a04de5aa74d8ed25fc703

                                                Sha256: c78d2b529472912245060a36f2393b664716b51511b6bdcfa385fba224ba3811

URL	https://ticaconnect.com/wp-content/plugins/bzviuon/CerticodePlus/DSP2/login/login.php
IP	103.169.67.104
ASN	Bangmod Enterprise Co., Ltd.
Location	Singapore
Report completed	2022-07-06 14:05:34 UTC
Status	Loading report..
urlquery Alerts	No alerts detected

Overview

Settings

Intrusion Detection Systems

Blocklists

Files

No files detected

Passive DNS (8)

Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 103.169.67.104

Last 10 reports on ASN: Bangmod Enterprise Co., Ltd.

Last 8 reports on domain: ticaconnect.com

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (30)

UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer