Report - root1.neovision.de/

Report Overview

Submitted URL
root1.neovision.de/
IP
138.201.56.111
ASN
#24940 Hetzner Online GmbH
Submitted
2023-01-14 01:28:25
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.88.143.102
root1.neovision.de	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	87 kB	138.201.56.111
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	4.4 kB	95.101.11.115
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
assets.plesk.com	120376	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7.8 kB	376 kB	185.76.9.14
ocsp.sca1b.amazontrust.com	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	700 B	1.9 kB	143.204.42.156
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	396 B	1.2 kB	142.250.74.106
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341 B	797 B	93.184.220.29
firehose.us-west-2.amazonaws.com	5730	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.5 kB	1.2 kB	35.89.72.88
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	60 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-01-14	medium	root1.neovision.de/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	assets.plesk.com/static/default-website-content/public/bundle.js	294 kB	2023-03-12	2023-03-26
Pretty URL assets.plesk.com/static/default-website-content/public/bundle.js IP 185.76.9.14 ASN #60068 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 13:34:34 Last Seen2023-03-26 07:09:40 Times Seen173 Hash 498bb8b452865fe23d0236d4718cfe68 db977d6ee8f8478372121cc9f39d4ce2a6d0f754 03e402ab422b39650ef99523abec2fcc878bcc1d7fe8bd9c44b7c394d18ce5aa Loading...

	assets.plesk.com/static/default-website-content/public/default-server-index.js	25 kB	2023-03-12	2023-03-26
Pretty URL assets.plesk.com/static/default-website-content/public/default-server-index.js IP 185.76.9.14 ASN #60068 Datacamp Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 13:35:04 Last Seen2023-03-26 07:09:40 Times Seen129 Hash 94e7747b4b543ca21a776803156a9f89 2c66e3a9c04f476edd9088fa89186ffdc494c263 c1502af06280f4a4e442eb3cb76912ceda65964633c08f773640b102123c24ea Loading...

		Size	First Seen	Last Seen
	#1 Write - 5a5046bc1a36e1dffd227bd183952342	14 kB	2023-03-12	2023-03-12
Pretty Observations First Seen2023-03-12 22:33:12 Last Seen2023-03-12 22:33:12 Times Seen1 Hash 5a5046bc1a36e1dffd227bd183952342 1605e2512e09a257f5326820da9bf1d40bcca599 9cc2f2b0a2992578c1ed114813f1ef74956530a4b2c1d7c75ac605247dd4ed3c Loading...

HTTP Transactions (49)

URL IP Response Size

root1.neovision.de/

138.201.56.111

200 OK

1.3 kB

URL HTTP/1.1
root1.neovision.de/
IP
138.201.56.111:0
ASN
#24940 Hetzner Online GmbH

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (422)
Size
1.3 kB (1270 bytes)
Hash
0b154147495109956a1d4e25796a9641
873126a9e1e84bb26a6bceece00a5a6deed4a50b
a79c4e07c9e2074ea43b9f5d506252adbb76067714b57fbf154b85cfad14bb51

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: root1.neovision.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 01:28:14 GMT
Content-Type: text/html
Content-Length: 1270
Connection: keep-alive
Last-Modified: Thu, 27 Feb 2020 05:44:33 GMT
ETag: "ef0-59f88372bf1d3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a8b4f1afb0e830b797238d34ab9254aa
e011acef3d05c959a65205d53b651ecd18a889fe
f7ceff5b4fda083c7449b7298c232224cf48a632dcb87233b646790de207d49c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F7CEFF5B4FDA083C7449B7298C232224CF48A632DCB87233B646790DE207D49C"
Last-Modified: Thu, 12 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18679
Expires: Sat, 14 Jan 2023 06:39:33 GMT
Date: Sat, 14 Jan 2023 01:28:14 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4826412809ac0196f13ac1ef44e357e5
793c81d2f90cfaa245dc89fc7a6090cbee846b26
11be07342f3aa4e059ddc3149337895d55bc71e30ad045dc72e4cca4be4c6951

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "11BE07342F3AA4E059DDC3149337895D55BC71E30AD045DC72E4CCA4BE4C6951"
Last-Modified: Wed, 11 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2371
Expires: Sat, 14 Jan 2023 02:07:45 GMT
Date: Sat, 14 Jan 2023 01:28:14 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 14 Jan 2023 00:42:00 GMT
content-type: application/json
age: 2774
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0f4ecf4f26be1ba09e61135b1b488bf4
f16b8277e00033bc990a8bcce54b693cb3c87d62
3018c2a228f0a894d217e8e8b0b8dd060527f06879cd2f469bac6c8766acbbf8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3018C2A228F0A894D217E8E8B0B8DD060527F06879CD2F469BAC6C8766ACBBF8"
Last-Modified: Wed, 11 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19395
Expires: Sat, 14 Jan 2023 06:51:29 GMT
Date: Sat, 14 Jan 2023 01:28:14 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: TG8dJxjzdvjl2gXP+e9+odSzfdtkPOXqTsizj/UfTd4MDpOFzSEhWXxkhQaaxC2NXlg5MiAcMFE=
x-amz-request-id: NXHFZ138PTESA1AD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 14 Jan 2023 00:54:44 GMT
age: 2010
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

root1.neovision.de/css/style.css

138.201.56.111

200 OK

1.4 kB

URL HTTP/1.1
root1.neovision.de/css/style.css
IP
138.201.56.111:0
ASN
#24940 Hetzner Online GmbH

File type
ASCII text
Size
1.4 kB (1435 bytes)
Hash
356b8edc52c470cefb11707e6cc4d99b
bcfa881ecd09db3bdfbf2f552edfc0eb673d6379
4c97e5ef9fba1c150703ed75faa220455f034302fc401826024128ba8dfcfb98

HTTP Headers

GET /css/style.css HTTP/1.1
Host: root1.neovision.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://root1.neovision.de/

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 01:28:14 GMT
Content-Type: text/css
Content-Length: 1435
Connection: keep-alive
Last-Modified: Tue, 14 Mar 2017 09:14:16 GMT
ETag: "120d-54aad4087ea00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 14 Jan 2023 01:28:14 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans:300,400,600&subset=latin,latin-ext,cyrillic,cyrillic-ext,greek,greek-ext,vietnamese

142.250.74.106

200 OK

683 B

URL HTTP/1.1
fonts.googleapis.com/css?family=Open+Sans:300,400,600&subset=latin,latin-ext,cyrillic,cyrillic-ext,greek,greek-ext,vietnamese
IP
142.250.74.106:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
683 B (683 bytes)
Hash
de9c94484e44b4bc78f62411bf1b805f
39713343e05d428f90e12ac6ed3dda9416667690
177aa23e39767ba7ed72838fe483ffbfd243a37f5ca2031f3720bc3baff33302

HTTP Headers

GET /css?family=Open+Sans:300,400,600&subset=latin,latin-ext,cyrillic,cyrillic-ext,greek,greek-ext,vietnamese HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://root1.neovision.de/

HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 14 Jan 2023 01:28:14 GMT
Date: Sat, 14 Jan 2023 01:28:14 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

root1.neovision.de/img/logo.png

138.201.56.111

200 OK

18 kB

URL HTTP/1.1
root1.neovision.de/img/logo.png
IP
138.201.56.111:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 133 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size
18 kB (18187 bytes)
Hash
4ecdddf53fa4b4b108649508cbd1c849
ae874dd2fe3a2ae2d9097111cba8fb9bcfc0c335
b3a52ce017d5ac916dbc75595f345f49075ee73c2c8fac31b430295487efeec4

HTTP Headers

GET /img/logo.png HTTP/1.1
Host: root1.neovision.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://root1.neovision.de/

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 01:28:14 GMT
Content-Type: image/png
Content-Length: 18187
Connection: keep-alive
Last-Modified: Tue, 14 Mar 2017 09:14:16 GMT
ETag: "470b-54aad4087ea00"
Accept-Ranges: bytes

root1.neovision.de/img/forum.png

138.201.56.111

200 OK

3.4 kB

URL HTTP/1.1
root1.neovision.de/img/forum.png
IP
138.201.56.111:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
3.4 kB (3425 bytes)
Hash
4a403551d727257944069360bff39127
66c59ee0139f2cd96077c09d2ff988c183931aad
f29b7727a1739d8a376f15794144bf71711378c36e185090f5929f16283db008

HTTP Headers

GET /img/forum.png HTTP/1.1
Host: root1.neovision.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://root1.neovision.de/css/style.css

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 01:28:15 GMT
Content-Type: image/png
Content-Length: 3425
Connection: keep-alive
Last-Modified: Tue, 14 Mar 2017 09:14:16 GMT
ETag: "d61-54aad4087ea00"
Accept-Ranges: bytes

root1.neovision.de/img/blog.png

138.201.56.111

200 OK

2.3 kB

URL HTTP/1.1
root1.neovision.de/img/blog.png
IP
138.201.56.111:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
2.3 kB (2328 bytes)
Hash
f7891a5403c402960ecb0ae37decbc65
105e9ffa2949e7460075e120277b61a4d656e495
68c47af57438cc7a864c4ed04ceffc2d66ace8792792f5ba66f6b4caedcced2b

HTTP Headers

GET /img/blog.png HTTP/1.1
Host: root1.neovision.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://root1.neovision.de/css/style.css

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 01:28:15 GMT
Content-Type: image/png
Content-Length: 2328
Connection: keep-alive
Last-Modified: Tue, 14 Mar 2017 09:14:16 GMT
ETag: "918-54aad4087ea00"
Accept-Ranges: bytes

root1.neovision.de/img/facebook.png

138.201.56.111

200 OK

1.9 kB

URL HTTP/1.1
root1.neovision.de/img/facebook.png
IP
138.201.56.111:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
1.9 kB (1933 bytes)
Hash
cb76fd023bb8bfb9dabae1b74019fd66
ca91a9cb8662e8af82146cf507c8380bab9e11ab
6216c4e00e4557d3db7efbe6d44b68bcc46823d60ffcad289b409a9dd73ff813

HTTP Headers

GET /img/facebook.png HTTP/1.1
Host: root1.neovision.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://root1.neovision.de/css/style.css

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 01:28:15 GMT
Content-Type: image/png
Content-Length: 1933
Connection: keep-alive
Last-Modified: Tue, 14 Mar 2017 09:14:16 GMT
ETag: "78d-54aad4087ea00"
Accept-Ranges: bytes

root1.neovision.de/img/knowledge-base.png

138.201.56.111

200 OK

1.5 kB

URL HTTP/1.1
root1.neovision.de/img/knowledge-base.png
IP
138.201.56.111:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
1.5 kB (1495 bytes)
Hash
0c1ea46ae67d053a893854c4c4d4cc84
dd1d9378fde23fb9da4dcfaf43431a420ab11f45
3e070b868ea022d3950d2c9d5cdbea9901b15fae3bc2a3bf9cf4ce6a585d9203

HTTP Headers

GET /img/knowledge-base.png HTTP/1.1
Host: root1.neovision.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://root1.neovision.de/css/style.css

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 01:28:15 GMT
Content-Type: image/png
Content-Length: 1495
Connection: keep-alive
Last-Modified: Tue, 14 Mar 2017 09:14:16 GMT
ETag: "5d7-54aad4087ea00"
Accept-Ranges: bytes

root1.neovision.de/img/twitter.png

138.201.56.111

200 OK

2.3 kB

URL HTTP/1.1
root1.neovision.de/img/twitter.png
IP
138.201.56.111:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
2.3 kB (2302 bytes)
Hash
49f00313f6add19cd5da23ea1409fe05
0bec70d41ddd47e300b16ce0d0895c1c3c745191
039ac96482995b80fa192cd487bc668e2acec3f84b3fb908a9624e9888acbc10

HTTP Headers

GET /img/twitter.png HTTP/1.1
Host: root1.neovision.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://root1.neovision.de/css/style.css

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 01:28:15 GMT
Content-Type: image/png
Content-Length: 2302
Connection: keep-alive
Last-Modified: Tue, 14 Mar 2017 09:14:16 GMT
ETag: "8fe-54aad4087ea00"
Accept-Ranges: bytes

assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-700-f1405b.woff2

185.76.9.14

200 OK

23 kB

URL HTTP/2
assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-700-f1405b.woff2
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type
Web Open Font Format (Version 2), TrueType, length 22992, version 1.0\012- data
Size
23 kB (22992 bytes)
Hash
1efbd38aa76ddae2580fedf378276333
8a49976f2470ba2a1db6144245355d3b889312e4
8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20

HTTP Headers

GET /static/default-website-content/public/fonts/lato-v16-latin-700-f1405b.woff2 HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://root1.neovision.de
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: font/woff2
content-length: 22992
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: "63b2c75a-59d0"
expires: Mon, 02 Jan 2023 12:14:51 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: FD44:183A:1090A39:174A79E:63B2C862
via: 1.1 varnish
age: 181
x-served-by: cache-bma1665-BMA
x-cache-hits: 1
x-timer: S1672661272.438761,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: dabf319c42146a6e8c941a8a980d8e6d1551d72f
x-accel-expires: @1673660077
server: CDN77-Turbo
x-77-nzt: AblMCQ0Io3r/2gAAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c2634fc99507
x-cache: HIT
x-age: 218
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/guy-cc224f.png

185.76.9.14

200 OK

10 kB

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/guy-cc224f.png
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type
PNG image data, 144 x 286, 8-bit/color RGBA, non-interlaced\012- data
Size
10 kB (9999 bytes)
Hash
508c30a08de6e9a033e045a6979f76d7
8bbde0114d14ef4e0687fab5cc70e3bd4d96c233
40d72d259fff82a177cd2c2f2a1bd0024ec04a2cd5a19d5596187755cc2ae5f2

HTTP Headers

GET /static/default-website-content/public/img/guy-cc224f.png HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/png
content-length: 9999
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: "63b2c75a-270f"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 899A:056E:10B5F31:176F340:63B2C818
via: 1.1 varnish
age: 417
x-served-by: cache-bma1668-BMA
x-cache-hits: 1
x-timer: S1672661433.453218,VS0,VE3
vary: Accept-Encoding
x-fastly-request-id: 1c2d56590b13c82842e6a7296b1bc2908b1fcab7
x-accel-expires: @1673660075
server: CDN77-Turbo
x-77-nzt: AblMCQ3KJib/3AAAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c26326069407
x-cache: HIT
x-age: 220
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/header-domain-page-98961e.png

185.76.9.14

200 OK

192 kB

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/header-domain-page-98961e.png
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type
PNG image data, 998 x 840, 8-bit/color RGBA, non-interlaced\012- data
Size
192 kB (191877 bytes)
Hash
15b75d100a555e3f0d84c59d81dd46e8
435e0f337cf2fb81d65fa4aa1c14caaa109f5bc6
f2fd07b6c6a69ba71eb8513377f052f5b692d610a2e890151084e7fcfb09799d

HTTP Headers

GET /static/default-website-content/public/img/header-domain-page-98961e.png HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/png
content-length: 191877
permissions-policy: interest-cohort=()
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: "63b2c75a-2ed85"
expires: Mon, 02 Jan 2023 12:16:13 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: 2152:D7EF:12F8BD9:13E7EEB:63B2C918
via: 1.1 varnish
age: 0
x-served-by: cache-bma1670-BMA
x-cache-hits: 0
x-timer: S1672661272.422092,VS0,VE124
vary: Accept-Encoding
x-fastly-request-id: cbb84f7d76d0d40b351b27dda087b982939ce23e
x-accel-expires: @1673660202
server: CDN77-Turbo
x-77-nzt: AblMCQ1zhRD/XQAAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c263e4c29107
x-cache: HIT
x-age: 93
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

root1.neovision.de/img/globe.png

138.201.56.111

200 OK

50 kB

URL HTTP/1.1
root1.neovision.de/img/globe.png
IP
138.201.56.111:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 546 x 480, 8-bit/color RGB, non-interlaced\012- data
Size
50 kB (49609 bytes)
Hash
396b2938f45c3eee4188c34fc1c5021e
0716af0793e6a9f2b62a6c21038f703b88656c09
49c6d2c4fc8143dd2389df5d6da8ff30128a1257a72ce2ddc922e4267bcb2f92

HTTP Headers

GET /img/globe.png HTTP/1.1
Host: root1.neovision.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://root1.neovision.de/css/style.css

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 01:28:15 GMT
Content-Type: image/png
Content-Length: 49609
Connection: keep-alive
Last-Modified: Tue, 14 Mar 2017 09:14:16 GMT
ETag: "c1c9-54aad4087ea00"
Accept-Ranges: bytes

root1.neovision.de/img/google-plus.png

138.201.56.111

200 OK

2.8 kB

URL HTTP/1.1
root1.neovision.de/img/google-plus.png
IP
138.201.56.111:0
ASN
#24940 Hetzner Online GmbH

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
2.8 kB (2836 bytes)
Hash
d508e2a83065a72b52ed7754561bf3ce
56cf5a054ad2375bf824e13a2dff8b90b0b50fbc
9f4985294ee20a0b9e938a84a664a71a6913b6ea0468e0f19bc8c739a343f4b5

HTTP Headers

GET /img/google-plus.png HTTP/1.1
Host: root1.neovision.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://root1.neovision.de/css/style.css

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 14 Jan 2023 01:28:15 GMT
Content-Type: image/png
Content-Length: 2836
Connection: keep-alive
Last-Modified: Tue, 14 Mar 2017 09:14:16 GMT
ETag: "b14-54aad4087ea00"
Accept-Ranges: bytes

assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-regular-65e877.woff2

185.76.9.14

200 OK

24 kB

URL HTTP/2
assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-regular-65e877.woff2
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type
Web Open Font Format (Version 2), TrueType, length 23484, version 1.0\012- data
Size
24 kB (23484 bytes)
Hash
b4d2c4c39853ee244272c04999b230ba
c82e22dde9716c40ba20e6c7ed03a1b66556de15
c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1

HTTP Headers

GET /static/default-website-content/public/fonts/lato-v16-latin-regular-65e877.woff2 HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://root1.neovision.de
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: font/woff2
content-length: 23484
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: "63b2c75a-5bbc"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: DBC0:0517:F72459:162AA4A:63B2C818
via: 1.1 varnish
age: 256
x-served-by: cache-bma1665-BMA
x-cache-hits: 1
x-timer: S1672661272.433515,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 6936522a81aa24969a54dbe6f027c05b5c3986c2
x-accel-expires: @1673660089
server: CDN77-Turbo
x-77-nzt: AblMCQ2YVc3/zgAAAA
x-77-nzt-ray: c0a4cc28068677a92f05c263cefd5f08
x-cache: HIT
x-age: 206
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/favicon-2d0e10.ico

185.76.9.14

200 OK

114 kB

URL HTTP/2
assets.plesk.com/static/default-website-content/public/favicon-2d0e10.ico
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type
MS Windows icon resource - 7 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel\012- data
Size
114 kB (113459 bytes)
Hash
1db747255c64a30f9236e9d929e986ca
384023452346aa087d40c93c23ca2f5e32ff1b1f
88baf40feb43463a8f6aa6543e88bdbe33f0db9a317486e786eee1e5c76a9544

HTTP Headers

GET /static/default-website-content/public/favicon-2d0e10.ico HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/vnd.microsoft.icon
content-length: 113459
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: "63b2c75a-1bb33"
expires: Mon, 02 Jan 2023 12:13:42 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 1F7E:2669:1152023:180B499:63B2C81E
via: 1.1 varnish
age: 0
x-served-by: cache-bma1654-BMA
x-cache-hits: 0
x-timer: S1672661023.725150,VS0,VE103
vary: Accept-Encoding
x-fastly-request-id: 7e7d9532e8899dd5c7acc2a59c2fe301e39dd97b
x-accel-expires: @1673659999
server: CDN77-Turbo
x-77-nzt: AblMCQ3vVqj/KAEAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c2638116790b
x-cache: HIT
x-age: 296
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 14 Jan 2023 01:17:25 GMT
age: 650
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
b1e3535cab3c1ac295b1412126a9325c
d1bdf1b8663817ae34b6182db29d6b20666779e7
90c4ecd4b0782647fd78110b5bacfb73d2b05aae4de789a90318574407dfb565

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3236
Cache-Control: max-age=117147
Content-Type: application/ocsp-response
Date: Sat, 14 Jan 2023 01:28:15 GMT
Etag: "63c11f26-1d7"
Expires: Sun, 15 Jan 2023 10:00:42 GMT
Last-Modified: Fri, 13 Jan 2023 09:06:46 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

ocsp.sca1b.amazontrust.com/

143.204.42.156

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.156:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
d140af9c0346193f8f9c9112c1f31d69
7fe1553936ab6cd748845f88f654f8e3da5812eb
311d757a4185ab74ebdb86f3bf40c1a62463d7f0779e8a19f889720ce0dd90b5

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=106137
Date: Sat, 14 Jan 2023 01:28:15 GMT
Etag: "63c0ec9e-1d7"
Expires: Sun, 15 Jan 2023 06:57:12 GMT
Last-Modified: Fri, 13 Jan 2023 05:31:10 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dwHh-fq-fsPh0Mo0Ff21usGA61NqR_thHBmXzGPyEFJqo6AH92IhWg==
Age: 5162

ocsp.sca1b.amazontrust.com/

143.204.42.156

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.156:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
d140af9c0346193f8f9c9112c1f31d69
7fe1553936ab6cd748845f88f654f8e3da5812eb
311d757a4185ab74ebdb86f3bf40c1a62463d7f0779e8a19f889720ce0dd90b5

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 14 Jan 2023 01:28:15 GMT
Last-Modified: Sat, 14 Jan 2023 01:03:29 GMT
Server: ECS (bsa/EB20)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _FrP8Ous0KXKRxl9-jn2TLShGyJVn1xL9mhSFpt3e_Z_qKaGF-oX9w==
Age: 1486

firehose.us-west-2.amazonaws.com/

35.89.72.88

200 OK

20 B

URL HTTP/1.1
firehose.us-west-2.amazonaws.com/
IP
35.89.72.88:0
ASN
#16509 AMAZON-02

File type
data
Size
20 B (20 bytes)
Hash
3970e82605c7d109bb348fc94e9eecc0
e03849ea786b9f7b28a35c17949e85a93eb1cff1
f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967

HTTP Headers

OPTIONS / HTTP/1.1
Host: firehose.us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent
Referer: http://root1.neovision.de/
Origin: http://root1.neovision.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amzn-RequestId: f1e99b7d-a745-227c-add5-9c1207675209
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Access-Control-Allow-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent
Access-Control-Allow-Methods: POST
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date
Access-Control-Max-Age: 172800
Content-Length: 20
Date: Sat, 14 Jan 2023 01:28:14 GMT

push.services.mozilla.com/

52.88.143.102

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.88.143.102:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2xD5YEvXI6I+MUxqePG64A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KRTYP+T7rgJp5/MplyH45Vd338A=

firehose.us-west-2.amazonaws.com/

35.89.72.88

200 OK

246 B

URL HTTP/1.1
firehose.us-west-2.amazonaws.com/
IP
35.89.72.88:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with no line terminators
Size
246 B (246 bytes)
Hash
4bdb93c1bf9982d202e7b5ad6287fa34
4c87561e444b88b8e3e49a6e6a6a1354501746ee
ad43b118782b36b90f7a2767aad50663ff1f9c17e459525b01bff14910f393c8

HTTP Headers

POST / HTTP/1.1
Host: firehose.us-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Amz-User-Agent: aws-sdk-js/2.1286.0 callback
Content-Type: application/x-amz-json-1.1
X-Amz-Target: Firehose_20150804.PutRecord
X-Amz-Content-Sha256: 150e7bcfda2f4ed2222a43d2b35dd24581c68d3ac5fbd4a280e8a302ee469865
X-Amz-Date: 20230114T012759Z
Authorization: AWS4-HMAC-SHA256 Credential=AKIAR4YEYRJL6JKBNRGP/20230114/us-west-2/firehose/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=5356e5136f780473f8727943047ba7fc203c7c05059dbcbd7354706db580e4b0
Content-Length: 108
Origin: http://root1.neovision.de
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
x-amzn-RequestId: e1e90f5b-421d-7383-bdd5-082be23f03f6
Access-Control-Allow-Origin: *
Content-Encoding: gzip
x-amz-id-2: MZvrpXncDLfRZxb//U7SXns23WCtOCColcSvRQ4DcEYPp4Z3kORm0kpCwl2EtjYxzJKn2jYlEN+SRnoUjFM5/SKuOotSgG5z
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date
Content-Type: application/x-amz-json-1.1
Content-Length: 246
Date: Sat, 14 Jan 2023 01:28:15 GMT

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6252
Expires: Sat, 14 Jan 2023 03:12:29 GMT
Date: Sat, 14 Jan 2023 01:28:17 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6252
Expires: Sat, 14 Jan 2023 03:12:29 GMT
Date: Sat, 14 Jan 2023 01:28:17 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9154 bytes)
Hash
b1378f107c1996ade14a8fe7fd728072
f52d98d9a0d1d343a539689ea14acf99e148cf8c
4be994757ec7ec42929590169de199e927889261334e258903a0929a1055047d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78b55aad-884c-40db-a779-021d0c2305b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9154
x-amzn-requestid: fbb1140d-7ec2-4f86-8761-5d04601af70e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAkCEN2IAMFuMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7ae6-4baebf1104f9cf2a0ee8a538;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OYkPEXF0RSbm6FI6MyKRvWjuYSfHR42QTU1vVnFPJX3y7m-HrNkSrw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 04:19:50 GMT
age: 76107
etag: "f52d98d9a0d1d343a539689ea14acf99e148cf8c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13626 bytes)
Hash
afcc8f4875f4b74ca0640829b689731e
584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df
3e487396389c4330abc99bc99053eecc6aaf56f7afa398d70c30e1f4709577a0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd91e555-c9f3-4166-92be-27db2e1919b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13626
x-amzn-requestid: 4769eaeb-0c78-4054-ad47-eefdd6ab2d03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eWHMZErbIAMF6sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b8b8b5-4c7bacfe060899044e361f70;Sampled=0
x-amzn-remapped-date: Sat, 07 Jan 2023 00:11:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JRzc2Mcl4EasyH6_1kFh7sr-57f1HNDu-YN8YptDe_kcTET9x8P9LA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 14:03:21 GMT
age: 41096
etag: "584d0e11665ae89f9a294baf1e9bb4f0e4e9a4df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.4 kB (7447 bytes)
Hash
2363dbe7bb6a459853d8d19cab50e70b
ded76de1dd453e40dbf6eaa8607cf19fac7f71a4
f96da6354cec52143768014c36ba2b298224a58b0bf38bd2aa5f3bfce69d8670

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0a5cc8b-8d62-447a-a39c-733e1afdd415.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7447
x-amzn-requestid: dd3543b7-4e6b-4605-acea-a21d39af02ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0qSFjAIAMF7HQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce41-56e2ccc63669032d70cba0ba;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AYaeawnEmwHkyx3h-yliVx-ARcRB3W5kbtFH5tARnL3YMD6e4WYAQw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:49:01 GMT
age: 13156
etag: "ded76de1dd453e40dbf6eaa8607cf19fac7f71a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F750e055f-1243-4c70-87b9-582708543ae4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10337 bytes)
Hash
0da64df67061f18811c06143292c4d5c
866288df55737a8e66ea1c0d460f72e0c9367173
611b58debf4cf0425e401878ff8fcd06ed9551b638520711e146e23c8b34575d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F750e055f-1243-4c70-87b9-582708543ae4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10337
x-amzn-requestid: ad86342a-d9e0-4146-8c6d-7dcffd26725d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAlRHHAoAMFm1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7aee-41bcda400a6bcbf1774b7ffe;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RPJrs6AWIx9UDKQwf-L9mSB2_ruvLP5jaRFAux2ZV-L-YZDjGil3lw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 03:49:14 GMT
age: 77943
etag: "866288df55737a8e66ea1c0d460f72e0c9367173"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65d9d771-1ac1-4b6e-abaf-11fc0e40a959.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.9 kB (4866 bytes)
Hash
36905f113161bad909a4a921d225289a
fc442c55e60782350000bc51d7e8942aaedad93a
4c072c310d1c4d41ec4acf33531a78f68300508a2255c990c57d1ecbfba01251

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65d9d771-1ac1-4b6e-abaf-11fc0e40a959.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4866
x-amzn-requestid: f94abb7c-3d85-43af-a32e-69005892ef26
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enAd9EJcoAMFh4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf7abf-4f6f27b57bd234132e47f098;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 03:13:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: P_-6b-u4gdpwHXNQGHaqLVM46hCLoTZEgEE5Hs_3sc9GXu47BsJAqw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 02:59:44 GMT
age: 80913
etag: "fc442c55e60782350000bc51d7e8942aaedad93a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.2 kB (8181 bytes)
Hash
d24ea1f095f492934a1f1c63f5d8590c
dade37148c9b9a941f93a8535d8ddc5de3952623
2d8e3f90eb347eb3479a6c5d20a1c2ca6a0560f335a6c6800948db2640e4c878

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F917985a1-aa8d-4c0a-860c-0b16c203387e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8181
x-amzn-requestid: 7ada8fbd-58e6-4433-a532-b4a4ef93ac9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: es0paH-OIAMFg5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1ce3c-582529522dbb67ee728484f8;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 21:33:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AHjOmYxva5avyA3gt9DvYLas_B2ACimer5QRQOi919HDtSjnKq22lw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 13 Jan 2023 21:36:45 GMT
age: 13892
etag: "dade37148c9b9a941f93a8535d8ddc5de3952623"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/facebook-2e0b41.svg

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/facebook-2e0b41.svg
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/img/facebook-2e0b41.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-318"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: A72C:3A7D:1067C6E:17203F0:63B2C818
via: 1.1 varnish
age: 256
x-served-by: cache-bma1636-BMA
x-cache-hits: 1
x-timer: S1672661272.425064,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 5475f005409e5b42c2ebccbea3195834e995ad94
x-accel-expires: @1673660044
server: CDN77-Turbo
x-77-nzt: AblMCQ2gWQn/+wAAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c2634f492307
x-cache: HIT
x-age: 251
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/plesk-guides-466bdb.svg

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/plesk-guides-466bdb.svg
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/img/plesk-guides-466bdb.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-8e6"
expires: Mon, 02 Jan 2023 12:14:30 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: F256:4C6A:105BBDD:171424C:63B2C84E
via: 1.1 varnish
age: 202
x-served-by: cache-bma1645-BMA
x-cache-hits: 1
x-timer: S1672661272.417270,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 2b2354ee1aa528887dad6d6b1300c06dd92b10f6
x-accel-expires: @1673659998
server: CDN77-Turbo
x-77-nzt: AblMCQ3pjvX/KQEAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c263e75ae106
x-cache: HIT
x-age: 297
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/developers-blog-1dd547.svg

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/developers-blog-1dd547.svg
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/img/developers-blog-1dd547.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-51f"
expires: Mon, 02 Jan 2023 12:13:41 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: BE42:7E18:FE7F48:16A0573:63B2C84E
via: 1.1 varnish
age: 202
x-served-by: cache-bma1636-BMA
x-cache-hits: 1
x-timer: S1672661272.420280,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: f0460032a83d0aa3fb9140deabaab6dfaa2a5029
x-accel-expires: @1673660061
server: CDN77-Turbo
x-77-nzt: AblMCQ1CpZ3/6gAAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c2635d000507
x-cache: HIT
x-age: 234
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/video-guides-0ca174.svg

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/video-guides-0ca174.svg
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/img/video-guides-0ca174.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-509"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 0DD4:0517:F7244E:162AA3A:63B2C818
via: 1.1 varnish
age: 256
x-served-by: cache-bma1645-BMA
x-cache-hits: 1
x-timer: S1672661272.421947,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: cb1efebc7ec168a0536c9ca7c9b043648ca04043
x-accel-expires: @1673660202
server: CDN77-Turbo
x-77-nzt: AblMCQ0cfTT/XQAAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c263091a1607
x-cache: HIT
x-age: 93
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/bundle.js

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/bundle.js
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/bundle.js HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-47d12"
expires: Mon, 02 Jan 2023 12:11:58 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: 7CA6:B0F7:1134214:121891B:63B2C7F7
via: 1.1 varnish
age: 39
x-served-by: cache-bma1637-BMA
x-cache-hits: 1
x-timer: S1672661023.668638,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: c33dccaae3d0e8ce14780d795c995f7ff1a4f353
x-accel-expires: @1673660016
server: CDN77-Turbo
x-77-nzt: AblMCQ1EMrr/FwEAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c2637d562907
x-cache: HIT
x-age: 279
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/default-server-index.js

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/default-server-index.js
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/default-server-index.js HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:14 GMT
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-61d9"
expires: Mon, 02 Jan 2023 12:17:08 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 76D0:1572:108E4C2:18D724A:63B2C8EC
via: 1.1 varnish
age: 0
x-served-by: cache-bma1630-BMA
x-cache-hits: 0
x-timer: S1672661228.031528,VS0,VE184
vary: Accept-Encoding
x-fastly-request-id: dbc332411c58c37e0407c35ea9be27d1079cb185
x-accel-expires: @1673659984
server: CDN77-Turbo
x-77-nzt: AblMCQ0oCvn/NgEAAA
x-77-nzt-ray: c0a4cc28557eaaa82e05c26341bb6136
x-cache: HIT
x-age: 310
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/try-online-demo-e76f32.svg

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/try-online-demo-e76f32.svg
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/img/try-online-demo-e76f32.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-6e9"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 4F06:0131:1023AB1:16DC696:63B2C818
via: 1.1 varnish
age: 256
x-served-by: cache-bma1648-BMA
x-cache-hits: 1
x-timer: S1672661272.420282,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: 268716ab91509c24e675ba2ace1f3b7671d0f741
x-accel-expires: @1673659998
server: CDN77-Turbo
x-77-nzt: AblMCQ38f5T/KQEAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c2638b08d206
x-cache: HIT
x-age: 297
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/logo-ebb972.svg

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/logo-ebb972.svg
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/img/logo-ebb972.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-86f"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 6AFE:3368:107664D:172EED4:63B2C818
via: 1.1 varnish
age: 256
x-served-by: cache-bma1635-BMA
x-cache-hits: 1
x-timer: S1672661272.420688,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 1d9a84d28a0c886a46dc54243246a7fcdc981381
x-accel-expires: @1673660201
server: CDN77-Turbo
x-77-nzt: AblMCQ31yMX/XgAAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c26316a8b906
x-cache: HIT
x-age: 94
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/question-mark-circle-2b854e.svg

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/question-mark-circle-2b854e.svg
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/img/question-mark-circle-2b854e.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-1ce"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: A284:3610:1101362:17BAB89:63B2C818
via: 1.1 varnish
age: 256
x-served-by: cache-bma1627-BMA
x-cache-hits: 1
x-timer: S1672661272.418127,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: b355c6d2043a3a420143779d7f593e3d45325fa1
x-accel-expires: @1673659998
server: CDN77-Turbo
x-77-nzt: AblMCQ1MSc7/KQEAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c2632679c206
x-cache: HIT
x-age: 297
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/knowlede-base-e4cf57.svg

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/knowlede-base-e4cf57.svg
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/img/knowlede-base-e4cf57.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-332"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 7D10:79F0:10B2413:176B918:63B2C818
via: 1.1 varnish
age: 256
x-served-by: cache-bma1661-BMA
x-cache-hits: 1
x-timer: S1672661272.420944,VS0,VE3
vary: Accept-Encoding
x-fastly-request-id: 33970a693e694459f9b0fa1d4faef5cae5227753
x-accel-expires: @1673659998
server: CDN77-Turbo
x-77-nzt: AblMCQ2pUVj/KQEAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c2634d34eb06
x-cache: HIT
x-age: 297
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/forum-a9076c.svg

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/forum-a9076c.svg
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/img/forum-a9076c.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-1569"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 80AE:6E39:117806B:1831353:63B2C818
via: 1.1 varnish
age: 256
x-served-by: cache-bma1633-BMA
x-cache-hits: 1
x-timer: S1672661272.418608,VS0,VE10
vary: Accept-Encoding
x-fastly-request-id: 9bcbace3cee9b6c237d856c16166635c4f59a885
x-accel-expires: @1673659998
server: CDN77-Turbo
x-77-nzt: AblMCQ3hSDj/KQEAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c263beecf506
x-cache: HIT
x-age: 297
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

assets.plesk.com/static/default-website-content/public/img/header-bg-6827b7.svg

185.76.9.14

200 OK

0 B

URL HTTP/2
assets.plesk.com/static/default-website-content/public/img/header-bg-6827b7.svg
IP
185.76.9.14:0
ASN
#60068 Datacamp Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /static/default-website-content/public/img/header-bg-6827b7.svg HTTP/1.1
Host: assets.plesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://root1.neovision.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Sat, 14 Jan 2023 01:28:15 GMT
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-132"
expires: Mon, 02 Jan 2023 12:12:52 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: 6AFE:3368:1076653:172EEDA:63B2C818
via: 1.1 varnish
age: 256
x-served-by: cache-bma1620-BMA
x-cache-hits: 1
x-timer: S1672661272.423126,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: 9fd0f92ef84bb1b9feb2a74c3914aefd99673fdf
x-accel-expires: @1673660202
server: CDN77-Turbo
x-77-nzt: AblMCQ0B7mH/XQAAAA
x-77-nzt-ray: c0a4cc28557eaaa82f05c26303928f07
x-cache: HIT
x-age: 93
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (49)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2