urlquery - report: roanoke.family/works/zaz/webcss/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-28 05:55:58 UTC	34.102.187.140
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-28 05:53:26 UTC	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	54.148.213.75
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
roanoke.family (14)	0	2018-11-24 01:20:22 UTC	2022-11-29 02:33:40 UTC	151.101.130.159	Unknown ranking
r3.o.lencr.org (7)	344	No data	No data	23.36.77.32
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29

Scan Date	Severity	Indicator	Comment
2022-11-29	2	roanoke.family/works/zaz/webcss/	Phishing
2022-11-29	2	roanoke.family/works/zaz/webcss/	Phishing
2022-11-29	2	roanoke.family/works/zaz/webcss/css/osp.js	Phishing
2022-11-29	2	roanoke.family/works/zaz/webcss/css/icon_arrowhead_progressBar_finished.svg	Phishing
2022-11-29	2	roanoke.family/works/zaz/webcss/css/language_italian.svg	Phishing
2022-11-29	2	roanoke.family/works/zaz/webcss/css/icon_arrowhead_progressBar_next.svg	Phishing
2022-11-29	2	roanoke.family/works/zaz/webcss/css/icon_arrowhead_progressBar_now.svg	Phishing
2022-11-29	2	roanoke.family/works/zaz/webcss/css/LOGO_BSE_PAGAM.svg	Phishing
2022-11-29	2	roanoke.family/works/zaz/images/icon_arrowhead_back.svg	Phishing
2022-11-29	2	roanoke.family/works/zaz/images/icon_arrowhead_main.svg	Phishing

Date	UQ / IDS / BL	URL	IP
2023-02-01 11:59:19 +0000	0 - 6 - 0	www.benningtongreen.co.uk/	151.101.130.159
2023-01-28 20:01:01 +0000	0 - 2 - 0	www.doktor.se/	151.101.130.159
2023-01-26 21:20:46 +0000	0 - 3 - 0	toronto.iabc.to/wp-login.php	151.101.130.159
2023-01-22 05:06:45 +0000	0 - 0 - 13	franosbarbershop.com/wp-content/verif.accs.se (...)	151.101.130.159
2023-01-14 22:19:11 +0000	0 - 0 - 2	infusetheplanet.com/wp-content/themes/twentys (...)	151.101.130.159

Date	UQ / IDS / BL	URL	IP
2023-02-03 13:59:18 +0000	2 - 0 - 3	case7771090100-review-appeal.web.app/d/posts/ (...)	199.36.158.100
2023-02-03 13:46:14 +0000	0 - 0 - 2	deepmaladixit.github.io/netflix.github.io/	185.199.109.153
2023-02-03 13:45:25 +0000	0 - 1 - 2	deepmaladixit.github.io/Netflix.new/	185.199.108.153
2023-02-03 13:40:55 +0000	0 - 2 - 6	okay99-update-2022.web.app/	199.36.158.100
2023-02-03 13:36:33 +0000	0 - 0 - 4	xn--feb.web.app/	199.36.158.100

Date	UQ / IDS / BL	URL	IP
2023-01-05 01:37:25 +0000	5 - 0 - 42	roanoke.family/wp-content/online/tracking-pac (...)	151.101.130.159
2022-11-29 21:43:44 +0000	0 - 0 - 2	roanoke.family/works/zaz/webcss/	151.101.130.159
2022-11-29 18:57:01 +0000	0 - 0 - 2	roanoke.family/works/zaz/webcss/	151.101.130.159
2022-11-29 16:39:16 +0000	0 - 0 - 2	roanoke.family/works/zaz/webcss/	151.101.130.159
2022-11-29 03:01:46 +0000	1 - 0 - 10	roanoke.family/works/zaz/webcss/	151.101.130.159

Date	UQ / IDS / BL	URL	IP
2022-12-22 06:22:00 +0000	13 - 0 - 11	rinnovadominio-it.167-99-242-43.plesk.page/pa (...)	167.99.242.43
2022-12-22 06:21:40 +0000	13 - 0 - 9	rinnovadominio-it.167-99-242-43.plesk.page/	167.99.242.43
2022-09-13 22:19:38 +0000	0 - 0 - 9	idolnutrition.com/area/b532536d5f8d808978b5f0 (...)	163.44.198.41
2022-09-13 22:19:18 +0000	0 - 0 - 9	idolnutrition.com/area/4a61d37a4e4f459e687436 (...)	163.44.198.41
2022-09-13 22:01:22 +0000	0 - 0 - 10	idolnutrition.com/area/ed31de20fff66637225f30 (...)	163.44.198.41

Request	Response
GET /works/zaz/webcss/ HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: roanoke.family/works/zaz/webcss/ FQDN: roanoke.family IP: 151.101.130.159 HASH: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a 151.101.130.159 HTTP/1.1 301 Moved Permanently Content-Type: text/html Connection: keep-alive Content-Length: 162 Location: https://roanoke.family/works/zaz/webcss/ X-XSS-Protection: 1 X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-FW-Server: Flywheel/5.1.0 X-FW-Hash: ug6mlb3sfo X-Hits: 10 X-FW-Version: 5.0.0 Server: Flywheel/5.1.0 Accept-Ranges: bytes Date: Tue, 29 Nov 2022 03:01:36 GMT X-Served-By: cache-bma1669-BMA X-Cache: HIT, MISS X-Cache-Hits: 0 X-Timer: S1669690896.881663,VS0,VE121 Vary: Authorization X-FW-Serve: TRUE X-FW-Static: NO X-FW-Type: VISIT --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 162 Md5: 4f8e702cc244ec5d4de32740c0ecbd97 Sha1: 3adb1f02d5b6054de0046e367c1d687b6cdf7aff Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5604 Expires: Tue, 29 Nov 2022 04:35:00 GMT Date: Tue, 29 Nov 2022 03:01:36 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 2d2e7649ce9e9ba6fc8b68aa89352e3c Sha1: 0153d1d3d830a457043e16bb40d48a0b9ddef4b8 Sha256: 8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5854 Cache-Control: 'max-age=158059' Date: Tue, 29 Nov 2022 03:01:36 GMT Last-Modified: Tue, 29 Nov 2022 01:24:02 GMT Server: ECS (ska/F70F) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 9408cc0694fcbea57966c3a3ba906092 Sha1: fddcee1fdcf3209298e41a4b1b5560357fa165f0 Sha256: 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Tue, 29 Nov 2022 02:17:51 GMT cache-control: public,max-age=3600 age: 2625 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7894 Expires: Tue, 29 Nov 2022 05:13:10 GMT Date: Tue, 29 Nov 2022 03:01:36 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6d9d34c96b9a826ae5676640c966469c Sha1: 8052a16d41a637e420478b7de1ff5a2dc951fccd Sha256: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: jULEHlgXDZGqZqpnDnZ4obEWD2L/DGJht5HGrWF2MAcgwYGVCAssdfPJTpPxl1WsAr4n/taw00c= x-amz-request-id: EHBV42W59YDPNY7N content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 29 Nov 2022 02:45:16 GMT age: 980 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Tue, 29 Nov 2022 03:01:36 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /works/zaz/webcss/ HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: roanoke.family/works/zaz/webcss/ FQDN: roanoke.family IP: 151.101.130.159 HASH: abc2c8958c64dbed8e37d6b8d6bae723aca957f7184bd2228447c2c9ed1aca28 151.101.130.159 HTTP/2 200 OK content-type: text/html; charset=UTF-8 x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-dynamic: TRUE x-fw-hash: ug6mlb3sfo content-encoding: gzip x-hits: 2 accept-ranges: bytes x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 date: Tue, 29 Nov 2022 03:01:36 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690896.251787,VS0,VE121 vary: Accept-Encoding x-fw-serve: TRUE x-fw-static: NO x-fw-type: VISIT content-length: 3783 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (322) Size: 3783 Md5: a6e8f91dcde488871b169338e0b10091 Sha1: 6d199dc2ff61e675ddd7b4e47ebf6d13988c8ce8 Sha256: abc2c8958c64dbed8e37d6b8d6bae723aca957f7184bd2228447c2c9ed1aca28 Alerts: Blocklists: - fortinet: Phishing
GET /works/zaz/webcss/css/dyf.css HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/webcss/css/dyf.css FQDN: roanoke.family IP: 151.101.130.159 HASH: 7b16ea0c1709d02b1ebf12c3751be09869712f0b660f8b623c88e3beffc83514 151.101.130.159 HTTP/2 200 OK content-type: text/css last-modified: Sun, 27 Nov 2022 07:08:24 GMT etag: W/"63830ce8-409d" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: ug6mlb3sfo cache-control: public, max-age=31536000 content-encoding: gzip x-hits: 44 accept-ranges: bytes x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 date: Tue, 29 Nov 2022 03:01:36 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690897.549020,VS0,VE120 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 4623 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (16540) Size: 4623 Md5: 8318807ddbb65dbce936b32f83d2f3bd Sha1: c2ed63b17e835a0967887bdbed5f654d6f1e8e1d Sha256: 7b16ea0c1709d02b1ebf12c3751be09869712f0b660f8b623c88e3beffc83514
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Tue, 29 Nov 2022 02:11:13 GMT cache-control: public,max-age=3600 age: 3023 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /works/zaz/webcss/css/osp.js HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/webcss/css/osp.js FQDN: roanoke.family IP: 151.101.130.159 HASH: f9bc0a2d58fd7ed4e72673505c31893f1b2a224bbf7059c3fdfe6047b0c24fc0 151.101.130.159 HTTP/2 200 OK content-type: application/javascript last-modified: Sun, 27 Nov 2022 07:08:24 GMT etag: W/"63830ce8-b7b" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: ug6mlb3sfo cache-control: public, max-age=31536000 content-encoding: gzip x-hits: 52 accept-ranges: bytes x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 date: Tue, 29 Nov 2022 03:01:36 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690897.549023,VS0,VE357 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 816 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 816 Md5: 556801b8ea77c69a2f55cbdbd194f49e Sha1: 65664ddcf2fa073995c9f3ec921de19703bdd7fb Sha256: f9bc0a2d58fd7ed4e72673505c31893f1b2a224bbf7059c3fdfe6047b0c24fc0 Alerts: Blocklists: - fortinet: Phishing
GET /works/zaz/webcss/css/checkBrowser.css HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/webcss/css/checkBrowser.css FQDN: roanoke.family IP: 151.101.130.159 HASH: a8f25c28374a67c755f227f74f22088f9fc21bf89ae35ed6cc4fc2f0fe1b51cd 151.101.130.159 HTTP/2 200 OK content-type: text/css last-modified: Sun, 27 Nov 2022 07:08:24 GMT etag: W/"63830ce8-a28" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: ug6mlb3sfo cache-control: public, max-age=31536000 content-encoding: gzip x-hits: 45 accept-ranges: bytes x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 date: Tue, 29 Nov 2022 03:01:36 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690897.549300,VS0,VE357 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 912 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (2600), with no line terminators Size: 912 Md5: 8d06e49b6555368625f7475883ffc774 Sha1: 717a5cafc34fa3541af9a5b56733794921c6d190 Sha256: a8f25c28374a67c755f227f74f22088f9fc21bf89ae35ed6cc4fc2f0fe1b51cd
GET /works/zaz/webcss/css/icon_arrowhead_progressBar_finished.svg HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/webcss/css/icon_arrowhead_prog (...) FQDN: roanoke.family IP: 151.101.130.159 HASH: 793b0e7d6ee2d6d5d578fb035463459a8685f81197554363b47854b8092f4910 151.101.130.159 HTTP/2 200 OK content-type: image/svg+xml last-modified: Sun, 27 Nov 2022 07:08:24 GMT etag: W/"63830ce8-84b" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: ug6mlb3sfo cache-control: public, max-age=31536000 content-encoding: gzip x-hits: 44 accept-ranges: bytes x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 date: Tue, 29 Nov 2022 03:01:36 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690897.551545,VS0,VE355 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES access-control-allow-origin: * x-fw-type: VISIT content-length: 903 X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 903 Md5: 011980af0a88f3b3e08e03eb88f15a9f Sha1: 77587ceed559f6fe852ad1d134960108acb449e6 Sha256: 793b0e7d6ee2d6d5d578fb035463459a8685f81197554363b47854b8092f4910 Alerts: Blocklists: - fortinet: Phishing
GET /works/zaz/webcss/css/language_italian.svg HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/webcss/css/language_italian.svg FQDN: roanoke.family IP: 151.101.130.159 HASH: c9931362d2029f049f9964d2cf499498062062b0eac9cd222eb08c17049f541f 151.101.130.159 HTTP/2 200 OK content-type: image/svg+xml last-modified: Sun, 27 Nov 2022 07:08:24 GMT etag: W/"63830ce8-2f0" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: ug6mlb3sfo cache-control: public, max-age=31536000 content-encoding: gzip x-hits: 44 accept-ranges: bytes x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 date: Tue, 29 Nov 2022 03:01:36 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690897.550876,VS0,VE357 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES access-control-allow-origin: * x-fw-type: VISIT content-length: 463 X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 463 Md5: d914cb9995a2e83ccd02dceb2ad18b01 Sha1: 4948c5f17c3892597fe05844eccc918b015096d7 Sha256: c9931362d2029f049f9964d2cf499498062062b0eac9cd222eb08c17049f541f Alerts: Blocklists: - fortinet: Phishing
GET /works/zaz/webcss/css/jquery-ui.css HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/ Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/webcss/css/jquery-ui.css FQDN: roanoke.family IP: 151.101.130.159 HASH: cc375e633856e2b36ddac945686a6129103ea58843a3247e43f11298280df92c 151.101.130.159 HTTP/2 200 OK content-type: text/css last-modified: Sun, 27 Nov 2022 07:08:24 GMT etag: W/"63830ce8-6e23" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: ug6mlb3sfo cache-control: public, max-age=31536000 content-encoding: gzip x-hits: 44 accept-ranges: bytes x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 date: Tue, 29 Nov 2022 03:01:37 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690897.549041,VS0,VE477 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES x-fw-type: VISIT content-length: 7416 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (28195), with no line terminators Size: 7416 Md5: ac33d04cdb8622e0a8f1a00ae6e122bd Sha1: 3245873ff02fb5c2b589c8d50c201643e5eba67d Sha256: cc375e633856e2b36ddac945686a6129103ea58843a3247e43f11298280df92c
GET /works/zaz/webcss/css/icon_arrowhead_progressBar_next.svg HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/webcss/css/icon_arrowhead_prog (...) FQDN: roanoke.family IP: 151.101.130.159 HASH: c4ade0d1c046b15d8db743525bad21a11c1b9af834a71172e78316854f4f5c54 151.101.130.159 HTTP/2 200 OK content-type: image/svg+xml last-modified: Sun, 27 Nov 2022 07:08:24 GMT etag: W/"63830ce8-857" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: ug6mlb3sfo cache-control: public, max-age=31536000 content-encoding: gzip x-hits: 44 accept-ranges: bytes x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 date: Tue, 29 Nov 2022 03:01:37 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690897.565374,VS0,VE475 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES access-control-allow-origin: * x-fw-type: VISIT content-length: 907 X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 907 Md5: 2a9138adbb5893a1982aea9411dcc06a Sha1: fce466c6bee695693a408b113ad4ececc24ef016 Sha256: c4ade0d1c046b15d8db743525bad21a11c1b9af834a71172e78316854f4f5c54 Alerts: Blocklists: - fortinet: Phishing
GET /works/zaz/webcss/css/icon_arrowhead_progressBar_now.svg HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/webcss/css/icon_arrowhead_prog (...) FQDN: roanoke.family IP: 151.101.130.159 HASH: 2827b09a31f193779c662b673cd727931556c23a37943222671cac1d56ba1ef5 151.101.130.159 HTTP/2 200 OK content-type: image/svg+xml last-modified: Sun, 27 Nov 2022 07:08:24 GMT etag: W/"63830ce8-856" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: ug6mlb3sfo cache-control: public, max-age=31536000 content-encoding: gzip x-hits: 44 accept-ranges: bytes x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 date: Tue, 29 Nov 2022 03:01:37 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690897.552248,VS0,VE477 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES access-control-allow-origin: * x-fw-type: VISIT content-length: 907 X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 907 Md5: 6bd2e22a3b6adb2255d688747e2f3ef8 Sha1: 6a8be9c8b5bf57700a70583b24a18fc4f09f8226 Sha256: 2827b09a31f193779c662b673cd727931556c23a37943222671cac1d56ba1ef5 Alerts: Blocklists: - fortinet: Phishing
GET /works/zaz/webcss/css/LOGO_BSE_PAGAM.svg HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/webcss/css/LOGO_BSE_PAGAM.svg FQDN: roanoke.family IP: 151.101.130.159 HASH: 59a383c7bebabf1fe656fb29e12bb3a6b7de1d1ea1f0f984f0f38af8f7c76da6 151.101.130.159 HTTP/2 200 OK content-type: image/svg+xml last-modified: Sun, 27 Nov 2022 07:08:24 GMT etag: W/"63830ce8-def" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: ug6mlb3sfo cache-control: public, max-age=31536000 content-encoding: gzip x-hits: 48 accept-ranges: bytes x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 date: Tue, 29 Nov 2022 03:01:37 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690897.549925,VS0,VE478 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: YES access-control-allow-origin: * x-fw-type: VISIT content-length: 1519 X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (3567), with no line terminators Size: 1519 Md5: e48488b018a00401d091785c719cfdaf Sha1: e60e0a56931a4ab668ad2639a208b7c9ed823157 Sha256: 59a383c7bebabf1fe656fb29e12bb3a6b7de1d1ea1f0f984f0f38af8f7c76da6 Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6562 Cache-Control: 'max-age=158059' Date: Tue, 29 Nov 2022 03:01:37 GMT Last-Modified: Tue, 29 Nov 2022 01:12:15 GMT Server: ECS (ska/F70F) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 7ab2ef968cb6a3078f4b9cb2dda813d4 Sha1: e669116047ca058a2c1b2999ff0ea8682719162c Sha256: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: ZvNMXa6WPGRsSgsSULTDZw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.148.213.75 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.148.213.75 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: nxW3AozPnwNt6C+fXHzZmnS4D/c= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/favicon.ico FQDN: roanoke.family IP: 151.101.130.159 HASH: 2847e4d77d263bb8ae947c7af6af836cd6114c20e89087c7ad3135f9f22eb705 151.101.130.159 HTTP/2 404 Not Found content-type: text/html x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-hash: ug6mlb3sfo content-encoding: gzip x-hits: 2 x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: YES fastly-restarts: 1 accept-ranges: bytes date: Tue, 29 Nov 2022 03:01:37 GMT x-served-by: cache-bma1637-BMA x-cache: HIT, MISS x-cache-hits: 0 x-timer: S1669690897.363603,VS0,VE120 vary: Accept-Encoding, Authorization x-fw-serve: TRUE x-fw-static: NO x-fw-type: VISIT content-length: 169 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators Size: 169 Md5: a2627fabb2bb291287be6de953d0bf26 Sha1: 75a6f79a8411e81e8aca77801a1c01640f1c0c31 Sha256: 2847e4d77d263bb8ae947c7af6af836cd6114c20e89087c7ad3135f9f22eb705
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4238 Expires: Tue, 29 Nov 2022 04:12:16 GMT Date: Tue, 29 Nov 2022 03:01:38 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4238 Expires: Tue, 29 Nov 2022 04:12:16 GMT Date: Tue, 29 Nov 2022 03:01:38 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4238 Expires: Tue, 29 Nov 2022 04:12:16 GMT Date: Tue, 29 Nov 2022 03:01:38 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4238 Expires: Tue, 29 Nov 2022 04:12:16 GMT Date: Tue, 29 Nov 2022 03:01:38 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4238 Expires: Tue, 29 Nov 2022 04:12:16 GMT Date: Tue, 29 Nov 2022 03:01:38 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a97c452e75cf1d4833e777d7ba7f2c47 Sha1: 58f15763fd33f742ce870f49f1c2dbed5b41205f Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10176 x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cMpbgEFOIAMF71A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g== via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 07:40:08 GMT age: 69690 etag: "772d86ad983042a728ee3490630a9cf1134ad0dd" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10176 Md5: 03014221d7f49b50ffc2d1b0a0e75457 Sha1: 772d86ad983042a728ee3490630a9cf1134ad0dd Sha256: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faee65fe0-e370-42e3-be13-065dcb4d76e1.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b9ea2d419742c67e2b14536379e7383524f22645b1af988d5bd72154647fc602 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4862 x-amzn-requestid: 17c6fb35-2dc8-45e4-a226-a74ba94323b3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cCvYlHXxIAMFcpg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637dc5d0-5a0f4f667a3747166eb2b338;Sampled=0 x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:44 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: XDdox2fz8xWMEWiTlHtpk_EeS6NUmzBRyWO3fTe47FfJOOvIehST1Q== via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 09:08:40 GMT age: 64378 etag: "a6c7a59a6599ece2cf0e76c778c920dea94ff469" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4862 Md5: 748366131b496e41f92e15ce7d1cd0e0 Sha1: a6c7a59a6599ece2cf0e76c778c920dea94ff469 Sha256: b9ea2d419742c67e2b14536379e7383524f22645b1af988d5bd72154647fc602
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7d89669e23682f167b2fe1eff9edc5939112ec66b6b4e6389ef8aec78ccbdfe5 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8921 x-amzn-requestid: 98baf100-c007-4c44-89aa-b9cf55fa3f94 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cVNnwFYToAMFoWg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63852964-1227b5a9100c206e0c64f4b2;Sampled=0 x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:28 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: awi49MMMlK51wHPbyBrBkL4N4g9lX3ea40LxyrYbYxe_FsfqelTcTQ== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 21:57:05 GMT etag: "c501de9eaa581a10b0b5fce40b54bb10f57f7c29" age: 18273 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8921 Md5: 823e92f62ff7b3c2093828817d7f2866 Sha1: c501de9eaa581a10b0b5fce40b54bb10f57f7c29 Sha256: 7d89669e23682f167b2fe1eff9edc5939112ec66b6b4e6389ef8aec78ccbdfe5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4916 x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cPYcrELFoAMFaeQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg== via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 03:31:10 GMT age: 84628 etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4916 Md5: 83c1fedec73299637cc7dc47c48af758 Sha1: 2e3f7326aeea6be8a34bf2c39b34862c07bfdc41 Sha256: 1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8d05305-0dee-4dad-a256-3b4083be8394.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 49c02723bab596584abe2dd3dcb11c660538516587911ee033dd0e6e8ea5889f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6716 x-amzn-requestid: 51e9f59e-558e-4bb4-8db5-741e0272f1fc x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cV3cHHwqIAMFvoQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63856c4d-48ecac9a4da2995b41abec49;Sampled=0 x-amzn-remapped-date: Tue, 29 Nov 2022 02:19:57 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: wyF7fr2HqPh1eMePdqbRp2_SNhDOFYEki_pvMQGi0INPRR9QxznyGg== via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google date: Tue, 29 Nov 2022 02:33:53 GMT etag: "f0410522b6dad8ebcbc2a64ff2193bafcfdc862e" age: 1665 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6716 Md5: 73001f7390ae3a80bbbaa9d9bacbe488 Sha1: f0410522b6dad8ebcbc2a64ff2193bafcfdc862e Sha256: 49c02723bab596584abe2dd3dcb11c660538516587911ee033dd0e6e8ea5889f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: abfbf4ecf2423736a29686859f6a8f2b77204b48f3f60d208f6d491e80611e7f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7549 x-amzn-requestid: bb37235a-8c7d-47fe-abb6-6cc633560165 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cP-7lHmsoAMF9lA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638311e3-1f2a4abc40119f3e026dc393;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 07:29:39 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: -aUqAfyrtMO0hkr2J2lm5SNNFdtaJj-F2dpBULvXjfOV205Ksm0iHw== via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 21:42:03 GMT age: 19175 etag: "600859401c885cc2cdd1f199cccc198eb41d6a04" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7549 Md5: 415b1b1d5a29fc17b4114bb3df1d1c22 Sha1: 600859401c885cc2cdd1f199cccc198eb41d6a04 Sha256: abfbf4ecf2423736a29686859f6a8f2b77204b48f3f60d208f6d491e80611e7f
GET /works/zaz/images/icon_arrowhead_back.svg HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/css/dyf.css Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/images/icon_arrowhead_back.svg FQDN: roanoke.family IP: 151.101.130.159 151.101.130.159 HTTP/2 404 Not Found content-type: text/html; charset=UTF-8 pragma: no-cache expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 link: <https://roanoke.family/wp-json/>; rel="https://api.w.org/" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-dynamic: TRUE x-fw-hash: ug6mlb3sfo content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: NO:Not Cacheable fastly-restarts: 1 accept-ranges: bytes date: Tue, 29 Nov 2022 03:01:39 GMT x-served-by: cache-bma1637-BMA x-cache: MISS, MISS x-cache-hits: 0 x-timer: S1669690897.102701,VS0,VE1988 vary: Accept-Encoding x-fw-serve: TRUE x-fw-static: NO x-fw-type: VISIT X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - fortinet: Phishing
GET /works/zaz/images/icon_arrowhead_main.svg HTTP/1.1 Host: roanoke.family User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://roanoke.family/works/zaz/webcss/css/dyf.css Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: roanoke.family/works/zaz/images/icon_arrowhead_main.svg FQDN: roanoke.family IP: 151.101.130.159 151.101.130.159 HTTP/2 404 Not Found content-type: text/html; charset=UTF-8 pragma: no-cache expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 link: <https://roanoke.family/wp-json/>; rel="https://api.w.org/" x-xss-protection: 1 x-content-type-options: nosniff referrer-policy: no-referrer-when-downgrade x-fw-server: Flywheel/5.1.0 x-fw-dynamic: TRUE x-fw-hash: ug6mlb3sfo content-encoding: gzip x-fw-version: 5.0.0 server: Flywheel/5.1.0 x-cacheable: NO:Not Cacheable fastly-restarts: 1 accept-ranges: bytes date: Tue, 29 Nov 2022 03:01:39 GMT x-served-by: cache-bma1637-BMA x-cache: MISS, MISS x-cache-hits: 0 x-timer: S1669690897.101812,VS0,VE2040 vary: Accept-Encoding x-fw-serve: TRUE x-fw-static: NO x-fw-type: VISIT X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - fortinet: Phishing

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 5854 

                                        
                                            
Cache-Control: 'max-age=158059' 

                                        
                                            
Date: Tue, 29 Nov 2022 03:01:36 GMT 

                                        
                                            
Last-Modified: Tue, 29 Nov 2022 01:24:02 GMT 

                                        
                                            
Server: ECS (ska/F70F) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    9408cc0694fcbea57966c3a3ba906092

                                                Sha1:   fddcee1fdcf3209298e41a4b1b5560357fa165f0

                                                Sha256: 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=7894 

                                        
                                            
Expires: Tue, 29 Nov 2022 05:13:10 GMT 

                                        
                                            
Date: Tue, 29 Nov 2022 03:01:36 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    6d9d34c96b9a826ae5676640c966469c

                                                Sha1:   8052a16d41a637e420478b7de1ff5a2dc951fccd

                                                Sha256: f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Tue, 29 Nov 2022 03:01:36 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /works/zaz/webcss/css/dyf.css HTTP/1.1 

                                        
                                            
Host: roanoke.family

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://roanoke.family/works/zaz/webcss/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         151.101.130.159

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
last-modified: Sun, 27 Nov 2022 07:08:24 GMT 

                                        
                                            
etag: W/"63830ce8-409d" 

                                        
                                            
x-xss-protection: 1 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
referrer-policy: no-referrer-when-downgrade 

                                        
                                            
x-fw-server: Flywheel/5.1.0 

                                        
                                            
x-fw-hash: ug6mlb3sfo 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
content-encoding: gzip 

                                        
                                            
x-hits: 44 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
x-fw-version: 5.0.0 

                                        
                                            
server: Flywheel/5.1.0 

                                        
                                            
x-cacheable: YES 

                                        
                                            
fastly-restarts: 1 

                                        
                                            
date: Tue, 29 Nov 2022 03:01:36 GMT 

                                        
                                            
x-served-by: cache-bma1637-BMA 

                                        
                                            
x-cache: HIT, MISS 

                                        
                                            
x-cache-hits: 0 

                                        
                                            
x-timer: S1669690897.549020,VS0,VE120 

                                        
                                            
vary: Accept-Encoding, Authorization 

                                        
                                            
x-fw-serve: TRUE 

                                        
                                            
x-fw-static: YES 

                                        
                                            
x-fw-type: VISIT 

                                        
                                            
content-length: 4623 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (16540)

                                                Size:   4623

                                                Md5:    8318807ddbb65dbce936b32f83d2f3bd

                                                Sha1:   c2ed63b17e835a0967887bdbed5f654d6f1e8e1d

                                                Sha256: 7b16ea0c1709d02b1ebf12c3751be09869712f0b660f8b623c88e3beffc83514

                                        
                                            GET /works/zaz/webcss/css/jquery-ui.css HTTP/1.1 

                                        
                                            
Host: roanoke.family

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://roanoke.family/works/zaz/webcss/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         151.101.130.159

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
last-modified: Sun, 27 Nov 2022 07:08:24 GMT 

                                        
                                            
etag: W/"63830ce8-6e23" 

                                        
                                            
x-xss-protection: 1 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
referrer-policy: no-referrer-when-downgrade 

                                        
                                            
x-fw-server: Flywheel/5.1.0 

                                        
                                            
x-fw-hash: ug6mlb3sfo 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
content-encoding: gzip 

                                        
                                            
x-hits: 44 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
x-fw-version: 5.0.0 

                                        
                                            
server: Flywheel/5.1.0 

                                        
                                            
x-cacheable: YES 

                                        
                                            
fastly-restarts: 1 

                                        
                                            
date: Tue, 29 Nov 2022 03:01:37 GMT 

                                        
                                            
x-served-by: cache-bma1637-BMA 

                                        
                                            
x-cache: HIT, MISS 

                                        
                                            
x-cache-hits: 0 

                                        
                                            
x-timer: S1669690897.549041,VS0,VE477 

                                        
                                            
vary: Accept-Encoding, Authorization 

                                        
                                            
x-fw-serve: TRUE 

                                        
                                            
x-fw-static: YES 

                                        
                                            
x-fw-type: VISIT 

                                        
                                            
content-length: 7416 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (28195), with no line terminators

                                                Size:   7416

                                                Md5:    ac33d04cdb8622e0a8f1a00ae6e122bd

                                                Sha1:   3245873ff02fb5c2b589c8d50c201643e5eba67d

                                                Sha256: cc375e633856e2b36ddac945686a6129103ea58843a3247e43f11298280df92c

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 6562 

                                        
                                            
Cache-Control: 'max-age=158059' 

                                        
                                            
Date: Tue, 29 Nov 2022 03:01:37 GMT 

                                        
                                            
Last-Modified: Tue, 29 Nov 2022 01:12:15 GMT 

                                        
                                            
Server: ECS (ska/F70F) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    7ab2ef968cb6a3078f4b9cb2dda813d4

                                                Sha1:   e669116047ca058a2c1b2999ff0ea8682719162c

                                                Sha256: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: roanoke.family

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://roanoke.family/works/zaz/webcss/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         151.101.130.159

                                        
                                            HTTP/2 404 Not Found 

                                        
                                            
content-type: text/html

                                        

                                        
                                            
x-xss-protection: 1 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
referrer-policy: no-referrer-when-downgrade 

                                        
                                            
x-fw-server: Flywheel/5.1.0 

                                        
                                            
x-fw-hash: ug6mlb3sfo 

                                        
                                            
content-encoding: gzip 

                                        
                                            
x-hits: 2 

                                        
                                            
x-fw-version: 5.0.0 

                                        
                                            
server: Flywheel/5.1.0 

                                        
                                            
x-cacheable: YES 

                                        
                                            
fastly-restarts: 1 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Tue, 29 Nov 2022 03:01:37 GMT 

                                        
                                            
x-served-by: cache-bma1637-BMA 

                                        
                                            
x-cache: HIT, MISS 

                                        
                                            
x-cache-hits: 0 

                                        
                                            
x-timer: S1669690897.363603,VS0,VE120 

                                        
                                            
vary: Accept-Encoding, Authorization 

                                        
                                            
x-fw-serve: TRUE 

                                        
                                            
x-fw-static: NO 

                                        
                                            
x-fw-type: VISIT 

                                        
                                            
content-length: 169 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators

                                                Size:   169

                                                Md5:    a2627fabb2bb291287be6de953d0bf26

                                                Sha1:   75a6f79a8411e81e8aca77801a1c01640f1c0c31

                                                Sha256: 2847e4d77d263bb8ae947c7af6af836cd6114c20e89087c7ad3135f9f22eb705

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4238 

                                        
                                            
Expires: Tue, 29 Nov 2022 04:12:16 GMT 

                                        
                                            
Date: Tue, 29 Nov 2022 03:01:38 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    a97c452e75cf1d4833e777d7ba7f2c47

                                                Sha1:   58f15763fd33f742ce870f49f1c2dbed5b41205f

                                                Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1" 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4238 

                                        
                                            
Expires: Tue, 29 Nov 2022 04:12:16 GMT 

                                        
                                            
Date: Tue, 29 Nov 2022 03:01:38 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    a97c452e75cf1d4833e777d7ba7f2c47

                                                Sha1:   58f15763fd33f742ce870f49f1c2dbed5b41205f

                                                Sha256: 39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10176 

                                        
                                            
x-amzn-requestid: 768fc69c-e91b-4dd9-8add-63634762b2d0 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cMpbgEFOIAMF71A= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6381bc49-21756db31c4714af0553f21b;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 26 Nov 2022 07:12:09 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: jS-AS3x8V3XacXRNkU63UJjBxA6unvBer5WcxUYseR5p4eZPK64o2g== 

                                        
                                            
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 07:40:08 GMT 

                                        
                                            
age: 69690 

                                        
                                            
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10176

                                                Md5:    03014221d7f49b50ffc2d1b0a0e75457

                                                Sha1:   772d86ad983042a728ee3490630a9cf1134ad0dd

                                                Sha256: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3527eb28-888e-447d-90fd-1226d5b94433.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8921 

                                        
                                            
x-amzn-requestid: 98baf100-c007-4c44-89aa-b9cf55fa3f94 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cVNnwFYToAMFoWg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63852964-1227b5a9100c206e0c64f4b2;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:28 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: awi49MMMlK51wHPbyBrBkL4N4g9lX3ea40LxyrYbYxe_FsfqelTcTQ== 

                                        
                                            
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 21:57:05 GMT 

                                        
                                            
etag: "c501de9eaa581a10b0b5fce40b54bb10f57f7c29" 

                                        
                                            
age: 18273 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8921

                                                Md5:    823e92f62ff7b3c2093828817d7f2866

                                                Sha1:   c501de9eaa581a10b0b5fce40b54bb10f57f7c29

                                                Sha256: 7d89669e23682f167b2fe1eff9edc5939112ec66b6b4e6389ef8aec78ccbdfe5

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8d05305-0dee-4dad-a256-3b4083be8394.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6716 

                                        
                                            
x-amzn-requestid: 51e9f59e-558e-4bb4-8db5-741e0272f1fc 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cV3cHHwqIAMFvoQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63856c4d-48ecac9a4da2995b41abec49;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 29 Nov 2022 02:19:57 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: wyF7fr2HqPh1eMePdqbRp2_SNhDOFYEki_pvMQGi0INPRR9QxznyGg== 

                                        
                                            
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 29 Nov 2022 02:33:53 GMT 

                                        
                                            
etag: "f0410522b6dad8ebcbc2a64ff2193bafcfdc862e" 

                                        
                                            
age: 1665 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6716

                                                Md5:    73001f7390ae3a80bbbaa9d9bacbe488

                                                Sha1:   f0410522b6dad8ebcbc2a64ff2193bafcfdc862e

                                                Sha256: 49c02723bab596584abe2dd3dcb11c660538516587911ee033dd0e6e8ea5889f

URL	roanoke.family/works/zaz/webcss/
IP	151.101.130.159 (United States)
ASN	#54113 FASTLY
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-29 03:01:46 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	10
urlquery alerts	1 Phishing - Banca Sella
Tags	None

Overview

Domain Summary (8)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 151.101.130.159

Last 5 reports on ASN: FASTLY

Last 5 reports on domain: roanoke.family

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (3)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (34)

Overview

Domain Summary (8)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 151.101.130.159

Last 5 reports on ASN: FASTLY

Last 5 reports on domain: roanoke.family

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (3)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (34)

Network Intrusion Detection Systems