Overview

URL painting.singheadline.xyz/
IP172.67.174.18
ASNCLOUDFLARENET
Location United States
Report completed2022-08-06 08:32:21 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-08-06 2 painting.singheadline.xyz/ Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (8)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2022-08-05 06:49:03 UTC 34.120.237.76
[Mnemonic Passive DNS] painting.singheadline.xyz (9) 0 No data No data 172.67.174.18 Unknown ranking
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.65
[Mnemonic Passive DNS] r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-08-06 04:58:11 UTC 23.36.76.226
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-08-06 04:57:51 UTC 54.230.111.7
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] ocsp.digicert.com (1) 86 2012-11-29 12:49:49 UTC 2022-08-06 05:01:09 UTC 93.184.220.29
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-08-06 05:12:46 UTC 44.228.106.27


Recent reports on same IP/ASN/Domain

No other reports on IP: 172.67.174.18


Last 10 reports on ASN: CLOUDFLARENET

Date UQ / IDS / BL URL IP
2022-08-09 11:11:35 +0000
0 - 0 - 9 ezl.app/c/BOT/ch/login.php 104.21.11.251
2022-08-09 11:09:32 +0000
0 - 0 - 3 demonware.online/AuDemon1/dashboard/programs/ (...) 172.67.222.253
2022-08-09 11:08:42 +0000
0 - 0 - 4 postmailer.onedrive0001.workers.dev/ 104.21.3.84
2022-08-09 11:07:50 +0000
0 - 0 - 1 https://www.mediafire.com/file/ksfd0w3im5lqiq (...) 104.18.182.224
2022-08-09 11:06:21 +0000
0 - 0 - 0 hhtps://posta-rs.id62845.site/71093649597 172.67.182.2
2022-08-09 11:05:06 +0000
0 - 0 - 1 placebonusextra.com/gb/tar/sur3box-650/15 104.26.14.156
2022-08-09 11:04:30 +0000
0 - 0 - 2 shopbacgau.com/ 104.21.80.142
2022-08-09 11:04:27 +0000
0 - 0 - 2 dichvumomo.online/ 104.21.76.139
2022-08-09 11:03:57 +0000
0 - 0 - 0 posta-rs.id62845.site 104.21.59.173
2022-08-09 11:03:11 +0000
0 - 0 - 1 hendaklahengkau.martulangsore.workers.dev/ 104.21.47.186

No other reports on domain: singheadline.xyz



JavaScript

Executed Scripts (1)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (26)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Content-Type, Alert, Backoff, Content-Length
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 06 Aug 2022 08:02:30 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -WJl-GHYPzdU0C5DG__IYO1ipt9HzmStjaKSGh224Jfq7MNMqY9ikg==
Age: 1780


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    c98c56ff7bc7ba547517573963f425e3
Sha1:   58c8dccc28ecd76424af6ed9988575a35cf8a0c2
Sha256: d57d9d5e87e8761ffdf790ff762307f5c823e8e8241781797373c10e076ec44e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F055127A4794D0F76CB4DF8F290DF8E259258A63398A700F592C859DFFE9AC34"
Last-Modified: Thu, 04 Aug 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10240
Expires: Sat, 06 Aug 2022 11:22:50 GMT
Date: Sat, 06 Aug 2022 08:32:10 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-09-19-18-34-07.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Sun, 31 Jul 2022 18:34:08 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 06 Aug 2022 04:15:27 GMT
etag: "578b9ff83ff3950ab2a3d1a8344d2938"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HMKvt2zh23VFMipciJtWennyQjxtCn1iNvPB-_ecq5OamGKqp_-buw==
age: 15404
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    578b9ff83ff3950ab2a3d1a8344d2938
Sha1:   39d48b67ba6aa45ec01767725e726cf9b0c87a70
Sha256: 35c99da9a5463a4788ceab7cf4b027bb25506cde28ace36c70d0bc924138f2f5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Sat, 06 Aug 2022 08:32:10 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 06 Aug 2022 08:16:16 GMT
Cache-Control: max-age=3600
Expires: Sat, 06 Aug 2022 08:47:10 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nffXZaS9qPMh7wokKFe9EePdOWEBpgaA5SkLC0JxUFXzI4YDWDXSaw==
Age: 957


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1742
Cache-Control: 'max-age=158059'
Date: Sat, 06 Aug 2022 08:32:11 GMT
Last-Modified: Sat, 06 Aug 2022 08:03:09 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vyfKnZ3puIbFH4b9iSVQBQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         44.228.106.27
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pX2u63lKJd3BQyINOWhPD7ObBnM=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D129895DD82ACE0D70FE0D261B7C2E924E869686CEDF20C238EFA6BFDF5E632"
Last-Modified: Wed, 03 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11264
Expires: Sat, 06 Aug 2022 11:39:56 GMT
Date: Sat, 06 Aug 2022 08:32:12 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D129895DD82ACE0D70FE0D261B7C2E924E869686CEDF20C238EFA6BFDF5E632"
Last-Modified: Wed, 03 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11264
Expires: Sat, 06 Aug 2022 11:39:56 GMT
Date: Sat, 06 Aug 2022 08:32:12 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D129895DD82ACE0D70FE0D261B7C2E924E869686CEDF20C238EFA6BFDF5E632"
Last-Modified: Wed, 03 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11264
Expires: Sat, 06 Aug 2022 11:39:56 GMT
Date: Sat, 06 Aug 2022 08:32:12 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecccae74-9298-410d-b1a0-83a3d7b983d6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8506
x-amzn-requestid: 93ea4e31-b1e6-44b7-ba46-44b76496a453
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaNkNGB_oAMFkww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8fb4-704275df3202a1b764f590a4;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:46:28 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Miss from cloudfront
x-amz-cf-id: cFw2UK9ZYkVM0f_zWHwLUPxjaFgf1wsEkeRtT7-kxA2z5QUYGIpZqw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 4201bd1d1fc37ea7749b3bd1b64fce02.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 21:47:22 GMT
etag: "1ef736718c08ae360d1903776f9c99c4e228705f"
content-type: image/jpeg
age: 38690
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8506
Md5:    f9a5115c54b2517b0274a5311abeef2a
Sha1:   1ef736718c08ae360d1903776f9c99c4e228705f
Sha256: b79b9b21fee63d4d27f573efdde582e1fe1baea14ca70ef88996c4e63e8d136a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b4367f8-790d-45d9-b749-83fca7bfa1e6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10504
x-amzn-requestid: 34564ee6-2bf2-459d-a5fc-9f3cef1b6217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMErFaVIAMFmtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8d50-6cdebe3b2fa1a29e19641330;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:36:16 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Miss from cloudfront
x-amz-cf-id: FspeYidcRrCb91HxVBEEocpO7vWM-TlEfv_P6_K0aCtZc9TuPpkBTQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a02a98c09aaf2561c8ca019e473cf172.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 21:47:22 GMT
etag: "848c1131fddc851879696767331034e141eafee2"
content-type: image/jpeg
age: 38690
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10504
Md5:    b2c2899149c79a1b7a4bc3122a91f0b2
Sha1:   848c1131fddc851879696767331034e141eafee2
Sha256: b17dcf4444715ae1f716441b8a25fb2cf5356b2dc059a77a4665c19fc3459ae2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa26223bd-d704-4f37-9bda-4a67147d87f9.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7022
x-amzn-requestid: eb9ae10a-10d8-45fb-9c1c-9793344a899f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMEqFdFoAMFpqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8d50-7c3c82f33c75abd35bbed203;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:36:16 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Miss from cloudfront
x-amz-cf-id: ne2tmhRnJwvpF6rsjhmV1WuPMesMi6ZaU0AT9HTXflM265fNUJcGXw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 a02a98c09aaf2561c8ca019e473cf172.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 21:50:20 GMT
etag: "de125f4ffd1f967c1557f082c41477891630539c"
content-type: image/jpeg
age: 38512
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7022
Md5:    f8ee35182a507e89b787ac718a80508c
Sha1:   de125f4ffd1f967c1557f082c41477891630539c
Sha256: 8def080600f8b45c3683dfb91586c9b03bf3fbb07437e9ab9dad816909cc3021
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38ac7a8b-efa3-4bb9-b35f-9a68e170d4eb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9366
x-amzn-requestid: deb6aa1d-b429-4218-a41c-00c81d15973b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMjcG0kIAMFbmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8e15-58f552ff2f58749d41a4879e;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:39:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hqRw_wvJLNz87-cTmti3sDlwvd_2st9PbUzxC8VQ_ShGSwS27ysRrw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 22:01:13 GMT
age: 37859
etag: "6eaa91dab23affc749e2ffe8d1452b4280b7b614"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9366
Md5:    126e9a90343e42dd18e69aa063bdb5cb
Sha1:   6eaa91dab23affc749e2ffe8d1452b4280b7b614
Sha256: 3d01b1ad823c09725f90507dd324ab2e17130768868641252c1299c51e01f449
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18cefdf7-0e0b-43b6-b1bc-c07ca31eb953.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10164
x-amzn-requestid: 5d9edced-b83d-4acc-ab16-6c9e760847a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMEsFKyIAMFdKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8d51-7568a9f253a2dc3e3c18af2f;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:36:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: bMsJOtNoXD1j7gFo_mHxOQZ8ATJU6u9XkXl5_DlPcYuHPB4pqdbLWg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 22:00:58 GMT
age: 37874
etag: "7606639404e300490feff4decc76ec565422437f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10164
Md5:    ac645545be7deae191864b0c82ea1957
Sha1:   7606639404e300490feff4decc76ec565422437f
Sha256: a7a855b8a7bce47926c972de67e6829e465ff403c98d6f24febf2728f091bf27
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2e82c42-fd94-454a-912f-56867d09ec8d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7007
x-amzn-requestid: 35d5361e-52fc-4daa-8cdb-954fb2a91144
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMEzEyIoAMFfMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8d51-3bfec49b5c66188b79c38b88;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:36:17 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Miss from cloudfront
x-amz-cf-id: efpRqESHFgiyUdGH0RwYFscSl6pxv1OMptErBaPImBAc9wolDIkB1A==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 70b0c022caf458423e58ecbec40508f0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 21:47:22 GMT
etag: "671abe46bc15fe88431e40416df266331a65f849"
content-type: image/jpeg
age: 38690
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7007
Md5:    1ed454c7b6a969da4f12c5dc57b0117e
Sha1:   671abe46bc15fe88431e40416df266331a65f849
Sha256: eb2cd92f0994a7bfea8151ce716bce18aa1bbbeca7ca66a786c09c3dff8a41e7
                                        
                                            GET / HTTP/1.1 
Host: painting.singheadline.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         172.67.174.18
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=utf-8
                                        
Date: Sat, 06 Aug 2022 08:32:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: zenid=7bgfvkjp4iniap4ull8v98udo6; path=/; domain=.painting.singheadline.xyz; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pYeGLPEjFEu%2FOXHwf2J6451OaFT2giT53kJwmmHatCZc6%2FPP9tzWJn%2FM8c%2BErRQVQPrLmazTBM1VXiFcMK2BTErWOdHx5Y0OatnBviJiluMGD4bbZGxGCXMGrM4NOJoN92GMrjDFNpivRg74"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 73666ba17c080b59-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2378), with CRLF, LF line terminators
Size:   9356
Md5:    efc2ac6763c561a64499649c31b24772
Sha1:   23ba05eacea1445ae78769e0d82a340720a37f91
Sha256: 0fb13a509250d4736fa31fe522fdb1a3cf9b5902674771adca5d621b4545be61

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /includes/templates/lw_a68/images/rank_1.gif HTTP/1.1 
Host: painting.singheadline.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://painting.singheadline.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.67.174.18
HTTP/2 200 OK
                                        
date: Sat, 06 Aug 2022 08:32:13 GMT
content-type: image/gif
content-length: 2024
last-modified: Wed, 09 Feb 2022 03:33:35 GMT
etag: "6203360f-7e8"
expires: Mon, 05 Sep 2022 08:32:13 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=elAGdcrLwjuwESPoe8li6CdL4w5WnuUeZWUnWmSdMd2Z6zVGPsWZi0ycFcWacVlz176d6VefLn02KK9IK5OwuYS3%2FnehDBng0rDfUn79Ngie9iMsTYE0vGo66k1ary7IQ5qCS4H2pkJSc4JC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 73666bb3fd9c1c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 100 x 39\012- data
Size:   2024
Md5:    c9c1a377b2465fa88eb90f7f21fc4943
Sha1:   c329224a6ff30a92cb75e8d055d12185c30b54c6
Sha256: 0362db86a76badda7ca8dec6954d760c2bfe7b5c3e438682ff3213926d5a5c08
                                        
                                            GET /includes/templates/lw_a68/images/mignavi_cart.png HTTP/1.1 
Host: painting.singheadline.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://painting.singheadline.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.67.174.18
HTTP/2 200 OK
                                        
date: Sat, 06 Aug 2022 08:32:13 GMT
content-type: image/png
content-length: 691
last-modified: Wed, 09 Feb 2022 03:33:35 GMT
etag: "6203360f-2b3"
expires: Mon, 05 Sep 2022 08:32:13 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qwh3uGD6xm%2Bsx%2BGMFpOzxwMo7nt42%2FCc9e6Fu5i9glKz%2BYQ6wlrggrQi5bO0rGJf%2FL3QlE56GUpa%2BmGynDny4jH6qMQT1SCwub9jkzQGUqkJVd7x0RyBXNkdi2bDGnpUW5Q3zGvvefZjZVKI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 73666bb3fd991c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced\012- data
Size:   691
Md5:    bf1fffbd08e99e545a4a3fcf645018fe
Sha1:   1dada142d18581d117d59b3861b6292380d466db
Sha256: b17057c8a46647cdc3fa0abbd1f59f44e7177a5d42e12d1def8035ef18089613
                                        
                                            GET /includes/templates/lw_a68/images/logo.png HTTP/1.1 
Host: painting.singheadline.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://painting.singheadline.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.67.174.18
HTTP/2 200 OK
                                        
date: Sat, 06 Aug 2022 08:32:13 GMT
content-type: image/png
content-length: 12694
last-modified: Wed, 09 Feb 2022 03:33:35 GMT
etag: "6203360f-3196"
expires: Mon, 05 Sep 2022 08:32:13 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rlo5MO7CCyh4lCR5H8eS%2B%2BeHryXFwvXixa6FaVqJ6pXpF6oBoIc9h0jjUrygDrcUup9yQEyaup5a37YWxBwiIBkRwn2yfwGer%2Fi4%2FOgxw11y71paJrN03KNV0o%2F8uIXzKebKqbF8KHx3ZYaT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 73666bb3fd981c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 758 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   12694
Md5:    24b7e527dd5ae42f89a601fdca40b30d
Sha1:   184716e597daca8f11ad00566926c00d0fe29bc8
Sha256: 3b83f115f1b23bc5890e4e5283e58cef658e22713b6a04a9552f85026eb477b9
                                        
                                            GET /includes/templates/lw_a68/images/172445.jpg HTTP/1.1 
Host: painting.singheadline.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://painting.singheadline.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.67.174.18
HTTP/2 200 OK
                                        
date: Sat, 06 Aug 2022 08:32:14 GMT
content-type: image/jpeg
content-length: 47042
last-modified: Wed, 09 Feb 2022 03:33:35 GMT
etag: "6203360f-b7c2"
expires: Mon, 05 Sep 2022 08:32:13 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gyvSrpgbKatIy0GD3ZIo9ZelulmuvCUUbLFi2UIEpf6T9%2F1p5eJ2wrJa4SH%2FnKtpMQJMo00Z%2FT1q1IaYnfJ24SQHHrtBuOFZ3ioVOCIaY%2FpXIybu5%2FZkq6xU9zfE44fULyy6CB6FIKz8kgCm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 73666bb40da41c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 696x697, components 3\012- data
Size:   47042
Md5:    b3bdbe7f713d03843be10a18c71d0058
Sha1:   cf3b289934168652df66235ba320c6020267b067
Sha256: e4d929f09fe14f656f8b68ffb236aadc88183687fb68635e173965990531ab79
                                        
                                            GET /includes/templates/lw_a68/images/28172534.jpg HTTP/1.1 
Host: painting.singheadline.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://painting.singheadline.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.67.174.18
HTTP/2 200 OK
                                        
date: Sat, 06 Aug 2022 08:32:14 GMT
content-type: image/jpeg
content-length: 53526
last-modified: Wed, 09 Feb 2022 03:33:35 GMT
etag: "6203360f-d116"
expires: Mon, 05 Sep 2022 08:32:13 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E6wXbJQJYZlwEgufiip6cD46MYlp0fWfwJ9fp1YeZ%2BpZquz7rt4FKOsoO5Pfs7JmlGQVJVcIV8KKs8%2Fb6SreSZppbRqwzBeyGrsjTBzguAlESLjlJ0WUqS6lKv6a%2BnL4Dhyw0nQRpbPVJoXh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 73666bb3fda21c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 748x728, components 3\012- data
Size:   53526
Md5:    a04116aa1a5dcfd596fd8e48037e9ab7
Sha1:   eea05f0d4450b6e22ee7de8034c0d1a897d705c8
Sha256: a21a044cbe0542a7d1b0ee16c42e65f7950d90f55deae8ec93aca0e66ad66d8b
                                        
                                            GET /includes/templates/lw_a68/images/2401.jpg HTTP/1.1 
Host: painting.singheadline.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://painting.singheadline.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.67.174.18
HTTP/2 200 OK
                                        
date: Sat, 06 Aug 2022 08:32:14 GMT
content-type: image/jpeg
content-length: 68362
last-modified: Wed, 09 Feb 2022 03:33:35 GMT
etag: "6203360f-10b0a"
expires: Mon, 05 Sep 2022 08:32:13 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BKnMEEyg%2F0VtGd4dENN6lbDRyawj95uaxUu%2BUIzsao1380XYXdpWRYkQzPjstIkpCt%2FEKRDlSJAzPz1XCBweGih2OsJcaeqdA9yB91GgVE6xksBR5Bm2QrkLGAR5LHcPh35raz7KVX0HWnMc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 73666bb3fd9f1c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 696x673, components 3\012- data
Size:   68362
Md5:    d38fd739af72d8d81006bec6710a2783
Sha1:   e3d63dc6e80a3342b57946d5a1d68bd360720803
Sha256: 5d28555e42ea122916cb2946d683131472ebb987cde607ef2c8cc6206c17d4b0
                                        
                                            GET /includes/templates/lw_a68/images/head_x28293.jpg HTTP/1.1 
Host: painting.singheadline.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://painting.singheadline.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         172.67.174.18
HTTP/2 200 OK
                                        
date: Sat, 06 Aug 2022 08:32:14 GMT
content-type: image/jpeg
content-length: 107876
last-modified: Wed, 09 Feb 2022 03:33:35 GMT
etag: "6203360f-1a564"
expires: Mon, 05 Sep 2022 08:32:13 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MYZ9ag18bPiF0KZk02k5tBIN1lHiYO%2BWL3neB42PAUs2Gtf%2F9xy9Rc7DeyqPMXB9aUpgqh%2Bh%2FvqRuIgibInsq0Pvfoft7REz98dax%2FGZZLneJ%2B6JtaFxVvXfWxfbK9Q2M2El%2FON%2F5gL4rTsc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 73666bb3fd9b1c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1030x400, components 3\012- data
Size:   107876
Md5:    b9f465bf1afbc716f787a98eb88e095b
Sha1:   7a368efa31fb6341ccf617bb72d54ccd75f30bc3
Sha256: 94998c91839456360f633c7f569ae8fd7210bc732ca83f68b48c50599b40808c
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: painting.singheadline.xyz
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://painting.singheadline.xyz/

                                         
                                         172.67.174.18
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Sat, 06 Aug 2022 08:32:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 28 Dec 2017 23:11:02 GMT
ETag: W/"5a457a06-1536"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=37aOf5CpVpFlcbntQEa4ZXhfcMHUaWZEb4JaQViY1zQ6%2FE7zj7YCQP3knkCwHYNuEiKt4f0nYOe7%2FSB2zR9kzgjxW8Cjmm1mFNY9OmmOZiCibvCQkVm9R8j1Zy1eTNyWyZjLNs74uXtpq9I7"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 73666bb9fb880b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   105
Md5:    f5755be425622c647f7b1bfc46c779d9
Sha1:   1f51e79cef0a25e8d04783b4e0a7660b76b6f657
Sha256: 24bf4d92ad9b12374ae1fe9ab145e89e62c3953c5c6274dbbf017d2574ad8ce4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bfd5df4-420a-41ec-b1de-b396653699e3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8223
x-amzn-requestid: 281d5f74-7335-41bf-a1b0-b96f8524a3ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMEqHQvoAMFluQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8d50-1840e5c331544b671bd6c5ed;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:36:16 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Miss from cloudfront
x-amz-cf-id: o9EeZetfZImEDJCDFyMh8hj9JXl78bbKcn2046qAYRLMW0r8sTJjyQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 87136170926d082ce5ff23d5ad5be32c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 21:47:23 GMT
etag: "9b19561b15e7e126ee65436ba20d4ae4098e6776"
content-type: image/jpeg
age: 38696
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8223
Md5:    21cb9fd64193c9fa61a65be28fa65bda
Sha1:   9b19561b15e7e126ee65436ba20d4ae4098e6776
Sha256: 16676379a98b377329551dea82df06b036aa7a1902ecc18b2467b25c0bd0e4dd