firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 22 Sep 2022 18:14:02 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7uTeGPmB3KXew1vAmDbVzKVhR-pQEZVazc15tyD1gmVTrE9svInt1w==
Age: 2850
0my.lotstolink.com/t/a4c85d49aa63/f3c1d868-3aa8-11ed-9ba6-45982b85ead2/f3c7ee92-3aa8-11ed-bffa-07ea742f3c2e
301 Moved Permanently 0 B URL HTTP/1.1 0my.lotstolink.com/t/a4c85d49aa63/f3c1d868-3aa8-11ed-9ba6-45982b85ead2/f3c7ee92-3aa8-11ed-bffa-07ea742f3c2e
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /t/a4c85d49aa63/f3c1d868-3aa8-11ed-9ba6-45982b85ead2/f3c7ee92-3aa8-11ed-bffa-07ea742f3c2e HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
content-length: 0
location: https://0my.lotstolink.com/t/a4c85d49aa63/f3c1d868-3aa8-11ed-9ba6-45982b85ead2/f3c7ee92-3aa8-11ed-bffa-07ea742f3c2e
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8802
Expires: Thu, 22 Sep 2022 21:28:15 GMT
Date: Thu, 22 Sep 2022 19:01:33 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 31pqqKQjNfvzjF1YeZPGhAfpwT-uNHSMWb5jLt7Fmqw8l4KwjboWPw==
age: 51979
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 19:01:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3be6385317f32005b2efd20f6c0c73c5
e4dff0fad5ab8f63a24a784ff6fa27173c6d97c1
73f0c24d743dda866760d438fde1bd6c35d3b593d5d1d0a171fabf0b7e5d7f1a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73F0C24D743DDA866760D438FDE1BD6C35D3B593D5D1D0A171FABF0B7E5D7F1A"
Last-Modified: Tue, 20 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 23 Sep 2022 01:01:33 GMT
Date: Thu, 22 Sep 2022 19:01:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 22 Sep 2022 18:03:22 GMT
Expires: Thu, 22 Sep 2022 18:12:27 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YpkW49pg4CB9m4rlUBlqojABDUVKPEhnsx3_aocdchTQirSwv4AnTw==
Age: 3491
ocsp.digicert.com/
200 OK 471 B IP
Hash 86624f45fb3b7126dbe002f69c94dd86
30bcf274db5037122f989fb25dbf1e72c9ec417b
2cc9600578cf057dc499835773fb495caa60ac154c4945f0fc1f2b31d43f5502
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1418
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 19:01:33 GMT
Last-Modified: Thu, 22 Sep 2022 18:37:55 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
0my.lotstolink.com/t/a4c85d49aa63/f3c1d868-3aa8-11ed-9ba6-45982b85ead2/f3c7ee92-3aa8-11ed-bffa-07ea742f3c2e
200 OK 6.3 kB URL HTTP/1.1 0my.lotstolink.com/t/a4c85d49aa63/f3c1d868-3aa8-11ed-9ba6-45982b85ead2/f3c7ee92-3aa8-11ed-bffa-07ea742f3c2e
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (985)
Hash 6e02da879f84171e11284c550b9f906d
7c08428ed24414b35262725d53072982422940b2
c545248e9bf3b4ceb3c186eebc22af392b84b7f09db7be4efd710574339f795e
Analyzer Verdict Alert fortinet Phishing
GET /t/a4c85d49aa63/f3c1d868-3aa8-11ed-9ba6-45982b85ead2/f3c7ee92-3aa8-11ed-bffa-07ea742f3c2e HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
date: Thu, 22 Sep 2022 19:01:33 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
service-worker-allowed: /
cache-control: no-cache, private
x-redir: true
set-cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; expires=Thu, 22 Sep 2022 21:01:33 GMT; Max-Age=7200; path=/; samesite=lax
yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D; expires=Thu, 22 Sep 2022 21:01:33 GMT; Max-Age=7200; path=/; httponly; samesite=lax
content-encoding: gzip
strict-transport-security: max-age=15768000
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ab9170d59e1c01422d2c55356248b569
0df99ca360de0b69a7e79d8e79b6383fec4a5453
7747cc09f59efbc03c3663c9be6bb63248a43f8f310c1bae1466255e83a72455
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 19:01:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 15:58:28 GMT
expires: Thu, 21 Sep 2023 15:58:28 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 97385
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c8ac2005f83e8a3a9da1a9837b6c2ff3
7c05f49683e49232c1e11b91253e684d2f96ab83
b0b42743b4c7e4b528fd78aadc5429ef34c2e127f3d5147330d428a47203dc0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 19:01:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
0my.lotstolink.com/templates/templates/mysterybox/files/custom_style.css
200 OK 9.1 kB URL HTTP/1.1 0my.lotstolink.com/templates/templates/mysterybox/files/custom_style.css
IP
File type ASCII text, with very long lines (341)
Hash d6821948f9d3a80b1f3169f670e1b06c
4e041b3a391424b761c6a55d63d9fd5c25c60565
67aa606c92605d826c400b3e72147f7df5723f1c1abee0bb4c8665a9cb0b4255
GET /templates/templates/mysterybox/files/custom_style.css HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 18 Sep 2022 13:40:03 GMT
last-modified: Thu, 15 Sep 2022 17:57:04 GMT
etag: "d6821948f9d3a80b1f3169f670e1b06c"
content-type: text/css
content-length: 9065
x-varnish: 142133053 137254302
age: 364891
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
strict-transport-security: max-age=15768000
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MKDPiRcE6fTU/11x6mq2ww==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ckr9iYTWD5pmcoXUjgzv0r3p2IE=
0my.lotstolink.com/templates/templates/mysterybox/files/en_date.js
200 OK 1.1 kB URL HTTP/1.1 0my.lotstolink.com/templates/templates/mysterybox/files/en_date.js
IP
Hash f9d789ef2320020f47db4ed0db2e4323
cf76ef82e090285dfd1fccfbb9c479ebf179ae1c
1999301c84d39ee8b6ea31d6b71f8de51a7470ea855b1080effcc67a2afe6136
Analyzer Verdict Alert fortinet Phishing
GET /templates/templates/mysterybox/files/en_date.js HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 18 Sep 2022 13:40:03 GMT
last-modified: Thu, 15 Sep 2022 17:57:04 GMT
etag: "f9d789ef2320020f47db4ed0db2e4323"
content-type: application/javascript
content-length: 1125
service-worker-allowed: /
x-varnish: 144474841 137254306
age: 364891
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
strict-transport-security: max-age=15768000
0my.lotstolink.com/templates/templates/mysterybox/files/platform.js
200 OK 41 kB URL HTTP/1.1 0my.lotstolink.com/templates/templates/mysterybox/files/platform.js
IP
File type ASCII text, with very long lines (568)
Hash ccad5ec1b46e291191a730fa8f9545bb
3a9ab890a0268080c79fcf3739ef82779d9ff453
5450fd792e0070751798a1b0923d0aef6e0fae66f81b0a17f5bed483e8a1234c
Analyzer Verdict Alert fortinet Phishing
GET /templates/templates/mysterybox/files/platform.js HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 18 Sep 2022 13:40:03 GMT
last-modified: Thu, 15 Sep 2022 17:57:04 GMT
etag: "ccad5ec1b46e291191a730fa8f9545bb"
content-type: application/javascript
content-length: 40635
service-worker-allowed: /
x-varnish: 144378833 137254309
age: 364891
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
strict-transport-security: max-age=15768000
0my.lotstolink.com/o/2XXQ6DLP/f3c1d868-3aa8-11ed-9ba6-45982b85ead2
302 Found 762 B URL HTTP/1.1 0my.lotstolink.com/o/2XXQ6DLP/f3c1d868-3aa8-11ed-9ba6-45982b85ead2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3f5cfd03e882436682bcd7f297d69d90
b6f36b2812f683371590fa71b6d9498587ae5404
80d0568b54ba1470e97077c2bc217d310c5d807e3f70c5df1aa7e33744663206
Analyzer Verdict Alert fortinet Phishing
GET /o/2XXQ6DLP/f3c1d868-3aa8-11ed-9ba6-45982b85ead2 HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
date: Thu, 22 Sep 2022 19:01:34 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
cache-control: no-cache, private
location: https://pushrev.neptuneadspush.com/tracker-v2-vapid.js?aff_id=1163&custom=v2&s2=fa13a764-3aa8-11ed-b924-916f0f135865&
x-redir: true
set-cookie: XSRF-TOKEN=eyJpdiI6IjVOZXdvT2JlbHZ1Q0Z0bWhObk9SeUE9PSIsInZhbHVlIjoiYjJoSTJFWGYxS1NWdWRNbnBBTVIxaGd5a3VaRDdXaWg4b0NQblNZQzIybmZ1b01sa05NWnF1cys0MThmKzhwZE5DMFVPaGZvVkRIK2JoQjBUd0FFZUZGbGtSYmVIOVJTejNSUHJPWU84S0laemVTT084blFPL0dCUGxkRjlyNEkiLCJtYWMiOiI4YzQ2M2UxMGUyYTc0ZmU1OGM3YzhjMzI2M2NmNDQ3ZDBhZGVhYTc2ODk1NzUzMjI1NGU4ZjcyOGQ4NmEwMGEyIiwidGFnIjoiIn0%3D; expires=Thu, 22 Sep 2022 21:01:34 GMT; Max-Age=7200; path=/; samesite=lax
yredir_session=eyJpdiI6InExVDZJaS8wblVuMzM1N1A5ODRNeEE9PSIsInZhbHVlIjoiOTJ3WDVJdGs0MDFaT2oyellBSFBTanFwUmRvUDNJSk5DT1NncnRYOWN2R08zZnh5WFAyWEdDWmIwNFkydkNnNnA0TzNYalFDSThpenJSa0ppd2VQbytMUkY1cHZRNTIwTDlTUHVEMVEwNERoclJzQkJoVXdyMEVBc1VxUG5aSG4iLCJtYWMiOiI4YWNjZThhY2RkM2Q4NGJhMWZhODRjMGU4NDUyMjE4M2Q5Zjc1ZTU1ZWVlZWM0MTI5MDNjNGViNTExZjhkODQyIiwidGFnIjoiIn0%3D; expires=Thu, 22 Sep 2022 21:01:34 GMT; Max-Age=7200; path=/; httponly; samesite=lax
strict-transport-security: max-age=15768000
0my.lotstolink.com/templates/templates/mysterybox/files/box_c.png
200 OK 8.8 kB URL HTTP/1.1 0my.lotstolink.com/templates/templates/mysterybox/files/box_c.png
IP
File type PNG image data, 241 x 184, 8-bit/color RGBA, non-interlaced\012- data
Hash 9b0b641f72293ea5bb5e43b8158b31a9
e04f96aac3e342f60df32c92ef54b9b316b1fb59
6b2c28e1e03c021256d67916384b83f706500edfa701080150d78bd9fab51bf2
GET /templates/templates/mysterybox/files/box_c.png HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 18 Sep 2022 13:40:04 GMT
last-modified: Thu, 15 Sep 2022 17:57:04 GMT
etag: "9b0b641f72293ea5bb5e43b8158b31a9"
content-type: image/png
content-length: 8814
x-varnish: 142133060 137347937
age: 364891
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
strict-transport-security: max-age=15768000
0my.lotstolink.com/templates/templates/mysterybox/files/exit.png
200 OK 525 B URL HTTP/1.1 0my.lotstolink.com/templates/templates/mysterybox/files/exit.png
IP
File type PNG image data, 29 x 29, 8-bit/color RGBA, non-interlaced\012- data
Hash 7b53e9c6d14fab18765c748a00d43c93
afe0633605e88df340fa3e0238c315eec766fe2f
fdc34fd73310984f22db0235f635024c80a884c451322931892dd722567ceaaf
GET /templates/templates/mysterybox/files/exit.png HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 18 Sep 2022 13:40:04 GMT
last-modified: Thu, 15 Sep 2022 17:57:04 GMT
etag: "7b53e9c6d14fab18765c748a00d43c93"
content-type: image/png
content-length: 525
x-varnish: 142133061 137436729
age: 364890
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
strict-transport-security: max-age=15768000
0my.lotstolink.com/templates/templates/mysterybox/assets/box_o_b.png
200 OK 3.4 kB URL HTTP/1.1 0my.lotstolink.com/templates/templates/mysterybox/assets/box_o_b.png
IP
File type PNG image data, 241 x 134, 8-bit colormap, non-interlaced\012- data
Hash 44da211f58be2b1f3aaa2aa3aa3055ed
59f5e9a8e6f5874a7521dec4fdd6878d7924bb75
ed16388bac328613e7ff4fa6933545b80a53cbcb528997e574a6f1b19f5aeeb2
GET /templates/templates/mysterybox/assets/box_o_b.png HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 18 Sep 2022 13:40:04 GMT
last-modified: Thu, 15 Sep 2022 17:57:04 GMT
etag: "44da211f58be2b1f3aaa2aa3aa3055ed"
content-type: image/png
content-length: 3394
x-varnish: 141056931 137283551
age: 364890
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
strict-transport-security: max-age=15768000
0my.lotstolink.com/media/template-images/mcdonalds-plain/300x200.jpg.png
403 Forbidden 243 B URL HTTP/1.1 0my.lotstolink.com/media/template-images/mcdonalds-plain/300x200.jpg.png
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash 2cac7ce049d3e0bdf5626e4f4d49bf1d
c7b3e2e22197ff54da48ee4fe0fe7e81c0dc3d48
844f3eb5598ae5566e63b2ba9509e1bfbac685933a0eeaf5463191dd2e0ceaf8
GET /media/template-images/mcdonalds-plain/300x200.jpg.png HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 403 Forbidden
content-type: application/xml
date: Thu, 22 Sep 2022 18:41:54 GMT
x-varnish: 143677110 137912772
age: 1179
via: 1.1 varnish (Varnish/7.0)
content-length: 243
strict-transport-security: max-age=15768000
0my.lotstolink.com/templates/templates/mysterybox/assets/box_o_t.png
200 OK 2.4 kB URL HTTP/1.1 0my.lotstolink.com/templates/templates/mysterybox/assets/box_o_t.png
IP
File type PNG image data, 241 x 79, 8-bit colormap, non-interlaced\012- data
Hash fc33ce5887eb7b5a81b9377a68698114
bb99be3eac1dbe6ebec9a1e5f08b0f183b79a2c6
f9e2740fb819e3748066a670f88ad743cfc3068d5ce2a99fbd1fa731537f6127
GET /templates/templates/mysterybox/assets/box_o_t.png HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 18 Sep 2022 13:40:04 GMT
last-modified: Thu, 15 Sep 2022 17:57:04 GMT
etag: "fc33ce5887eb7b5a81b9377a68698114"
content-type: image/png
content-length: 2430
x-varnish: 144378836 137436731
age: 364890
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
strict-transport-security: max-age=15768000
0my.lotstolink.com/templates/templates/mysterybox/files/gift.gif
200 OK 16 kB URL HTTP/1.1 0my.lotstolink.com/templates/templates/mysterybox/files/gift.gif
IP
File type GIF image data, version 89a, 100 x 100\012- data
Hash 573c467d7a0b1c4c009ba98927dfa335
78d9c7efaeed568b74f1e4d1b4eb67e51dbbb9f1
c4f1d8867d03d437694f1cac0c9df3a7f5006fb8df474023bfa1d78f88843ce8
GET /templates/templates/mysterybox/files/gift.gif HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Sun, 18 Sep 2022 13:40:04 GMT
last-modified: Thu, 15 Sep 2022 17:57:04 GMT
etag: "573c467d7a0b1c4c009ba98927dfa335"
content-type: image/gif
content-length: 15606
x-varnish: 144474846 137254314
age: 364890
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
strict-transport-security: max-age=15768000
0my.lotstolink.com/media/template-images/mcdonalds-plain/300x200.jpg
200 OK 12 kB URL HTTP/1.1 0my.lotstolink.com/media/template-images/mcdonalds-plain/300x200.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x194, components 3\012- data
Hash 1cc562ab493c3230d17880438cfad3f6
93ca91efcb7689169f1d3fae6f0fdb14b2461ea5
5be3b4c4a1344d8c09f4fc5b78377c63280d046973060dc127820d1c4df1e4d0
GET /media/template-images/mcdonalds-plain/300x200.jpg HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklTMzJGU2ZwTlE1cnpZZk9TSTh2WWc9PSIsInZhbHVlIjoiT2ZmaFJjUWQvTlQySmFRcWJuelNPUGtCVUZOSHdXalJCWFhxeHZhWU1ZazJvaUljdXZjWWEvZWo1ZHJ0d09zS3FVam01dFBiZ3QxVWtUYWJyNFArcUdra2Q4SWk1UVl6RmxBRk1yRVlaNmZuZ2lYNjlGZE81V1RwM2UzNy9xTXgiLCJtYWMiOiJiZjQxZDE0OGRjOThlZTc2OTMyMzk1OGFmNDY3YWZmZTgyMjVmNjU0MGU2ODk0ZGNjMzYwMWQxODViNDRjM2EwIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InM5S3ZuZWJQeHRTNVdDLzNlelRvTmc9PSIsInZhbHVlIjoiVVNmTmU2K3BuRktmM2Nad0lGTGlXK2Z4RlR4RC9aT2Z5cXM2WkRSTXVkY25OMlluUzRobWNzOU13cjVtb1A2NDRLZDAwL0VSOEpCN1FQQXhhYzd6emtrWG1UYzJmYUZ6Q3V6cXg5bWM4Z2pYL2F3aFlPdGlaNUdWc3BsQUpXRmEiLCJtYWMiOiJjNWI0ZDYxMTQ1ZDdkMTAwYjQzYzY0YTNkMmY1M2ZkMTJlOWYwMGFlYzZiYjgwODI1NDI0MDJlOGMyNmM3NWM2IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
date: Thu, 22 Sep 2022 18:42:04 GMT
last-modified: Tue, 17 May 2022 15:08:46 GMT
etag: "1cc562ab493c3230d17880438cfad3f6"
content-type: image/jpeg
content-length: 12390
x-varnish: 144378839 143752982
age: 1171
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
strict-transport-security: max-age=15768000
0my.lotstolink.com/_common/js/service-workers/neptuneads/service-worker.js
200 OK 90 B URL HTTP/1.1 0my.lotstolink.com/_common/js/service-workers/neptuneads/service-worker.js
IP
File type ASCII text, with no line terminators
Hash 1060884cf64d39c3fb28309d83ead97c
6c370dffa201da316e7dc11ff7ac7fec556a1273
d299b7fe0f0da619c1a2c016f631cf004b8a7f92fdb0104dfb6fc0ab03105123
Analyzer Verdict Alert fortinet Phishing
GET /_common/js/service-workers/neptuneads/service-worker.js HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjVOZXdvT2JlbHZ1Q0Z0bWhObk9SeUE9PSIsInZhbHVlIjoiYjJoSTJFWGYxS1NWdWRNbnBBTVIxaGd5a3VaRDdXaWg4b0NQblNZQzIybmZ1b01sa05NWnF1cys0MThmKzhwZE5DMFVPaGZvVkRIK2JoQjBUd0FFZUZGbGtSYmVIOVJTejNSUHJPWU84S0laemVTT084blFPL0dCUGxkRjlyNEkiLCJtYWMiOiI4YzQ2M2UxMGUyYTc0ZmU1OGM3YzhjMzI2M2NmNDQ3ZDBhZGVhYTc2ODk1NzUzMjI1NGU4ZjcyOGQ4NmEwMGEyIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InExVDZJaS8wblVuMzM1N1A5ODRNeEE9PSIsInZhbHVlIjoiOTJ3WDVJdGs0MDFaT2oyellBSFBTanFwUmRvUDNJSk5DT1NncnRYOWN2R08zZnh5WFAyWEdDWmIwNFkydkNnNnA0TzNYalFDSThpenJSa0ppd2VQbytMUkY1cHZRNTIwTDlTUHVEMVEwNERoclJzQkJoVXdyMEVBc1VxUG5aSG4iLCJtYWMiOiI4YWNjZThhY2RkM2Q4NGJhMWZhODRjMGU4NDUyMjE4M2Q5Zjc1ZTU1ZWVlZWM0MTI5MDNjNGViNTExZjhkODQyIiwidGFnIjoiIn0%3D; _NeptuneAdsPushSubscriberID=458e9653-26f3-8c43-c7be-1832381d957b
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Tue, 20 Sep 2022 10:22:42 GMT
last-modified: Fri, 20 May 2022 14:50:35 GMT
etag: "1060884cf64d39c3fb28309d83ead97c"
content-type: application/javascript
content-length: 90
service-worker-allowed: /
x-varnish: 144474852 140265746
age: 203933
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
strict-transport-security: max-age=15768000
0my.lotstolink.com/media/template-images/mcdonalds-plain/300x200.jpg.png
403 Forbidden 243 B URL HTTP/1.1 0my.lotstolink.com/media/template-images/mcdonalds-plain/300x200.jpg.png
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash 2cac7ce049d3e0bdf5626e4f4d49bf1d
c7b3e2e22197ff54da48ee4fe0fe7e81c0dc3d48
844f3eb5598ae5566e63b2ba9509e1bfbac685933a0eeaf5463191dd2e0ceaf8
GET /media/template-images/mcdonalds-plain/300x200.jpg.png HTTP/1.1
Host: 0my.lotstolink.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IjVOZXdvT2JlbHZ1Q0Z0bWhObk9SeUE9PSIsInZhbHVlIjoiYjJoSTJFWGYxS1NWdWRNbnBBTVIxaGd5a3VaRDdXaWg4b0NQblNZQzIybmZ1b01sa05NWnF1cys0MThmKzhwZE5DMFVPaGZvVkRIK2JoQjBUd0FFZUZGbGtSYmVIOVJTejNSUHJPWU84S0laemVTT084blFPL0dCUGxkRjlyNEkiLCJtYWMiOiI4YzQ2M2UxMGUyYTc0ZmU1OGM3YzhjMzI2M2NmNDQ3ZDBhZGVhYTc2ODk1NzUzMjI1NGU4ZjcyOGQ4NmEwMGEyIiwidGFnIjoiIn0%3D; yredir_session=eyJpdiI6InExVDZJaS8wblVuMzM1N1A5ODRNeEE9PSIsInZhbHVlIjoiOTJ3WDVJdGs0MDFaT2oyellBSFBTanFwUmRvUDNJSk5DT1NncnRYOWN2R08zZnh5WFAyWEdDWmIwNFkydkNnNnA0TzNYalFDSThpenJSa0ppd2VQbytMUkY1cHZRNTIwTDlTUHVEMVEwNERoclJzQkJoVXdyMEVBc1VxUG5aSG4iLCJtYWMiOiI4YWNjZThhY2RkM2Q4NGJhMWZhODRjMGU4NDUyMjE4M2Q5Zjc1ZTU1ZWVlZWM0MTI5MDNjNGViNTExZjhkODQyIiwidGFnIjoiIn0%3D; _NeptuneAdsPushSubscriberID=458e9653-26f3-8c43-c7be-1832381d957b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 403 Forbidden
content-type: application/xml
date: Thu, 22 Sep 2022 18:41:54 GMT
x-varnish: 144378842 137912772
age: 1180
via: 1.1 varnish (Varnish/7.0)
content-length: 243
strict-transport-security: max-age=15768000
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11527
Expires: Thu, 22 Sep 2022 22:13:42 GMT
Date: Thu, 22 Sep 2022 19:01:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11527
Expires: Thu, 22 Sep 2022 22:13:42 GMT
Date: Thu, 22 Sep 2022 19:01:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11527
Expires: Thu, 22 Sep 2022 22:13:42 GMT
Date: Thu, 22 Sep 2022 19:01:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6582596-5079-44f5-a869-65c8766f7d1a.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6582596-5079-44f5-a869-65c8766f7d1a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da8b8819fc21dcfb224ce0e7ecdc6772
e460ad4376cd118a6fe8b6b050af9398117d9531
9d0cf5fe17040e6c494d1596c24f01501babff37c95caa47d048b5e1aefa7697
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6582596-5079-44f5-a869-65c8766f7d1a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9901
x-amzn-requestid: bfdfb11f-7ec5-460b-8759-41033451e2a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1ueDEUOIAMFq5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632bc459-6f8ebea8143c58f652dc61e8;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 02:11:37 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ln0EYmIyTWExYNLVEv-ZYhdCAYVju_Wu2S-_p5GfD_Kev99yrKwRcg==
via: 1.1 b838ef1ff22a4a994af82d5178c30e1c.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 05:53:43 GMT
age: 47272
etag: "e460ad4376cd118a6fe8b6b050af9398117d9531"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91c56f0b9810bfdd84e10a626b89e389
15d83e44d568938b6c9c87201e898cedb3edec0a
942de9764e1c408f7512759774aab0479db201e6fae15ccc39e653adae4cb86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8678
x-amzn-requestid: c671a9ab-c5d0-4743-b13e-cc9a47e3d2fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vEThIAMFSwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-17ed13811d3833ea00a34423;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2Oem-Kw-aCUa2rA9B9-7CDYcZ-G968tFPnsrL5wJ9Dia43T5u6RDtg==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:09 GMT
etag: "15d83e44d568938b6c9c87201e898cedb3edec0a"
content-type: image/jpeg
age: 77246
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd654e30-611f-4c64-b1ad-43ca9fdedc0e.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd654e30-611f-4c64-b1ad-43ca9fdedc0e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c0201d377c57a684452c0d26372e674d
3829f81048cc63b5f0d1e82dfbe3b8e31646e733
efa055dc93267be2dddd94b334c0655c2e1f1682467fd738e013a778aea175b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd654e30-611f-4c64-b1ad-43ca9fdedc0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14397
x-amzn-requestid: c5a03ce8-f695-4ad3-8c42-c3bfd47d6279
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yv1wLGqKIAMF-Og=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6329699a-2b130d8b1a4b1b9131db8984;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 07:19:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: u2ObvTaTM2JREJRnWVxEdqPXYFWTdrtlqLLbHugcsNbENjZq63rKVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 15:24:06 GMT
age: 13049
etag: "3829f81048cc63b5f0d1e82dfbe3b8e31646e733"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62818de3c50f957b2e5680851a1768c9
80e48c9ae48c89598780736b089c98e22d58df9a
16f2c2d23e8641a3f297a175730343d11120a228c0fe846c0fdf1e39212c522c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dee9427-1c1b-4ddc-9f89-8c6e254bd0f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8549
x-amzn-requestid: 6d44626b-16c6-4f19-ae52-d5350065b390
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwPHJJoAMFdfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84ce-46ebc35612eb7a4473b36189;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UoQTXSP0LgR4LwELp2Avm27hUekfO9TU9yfvNbIlmUtB-FrU9MGRbg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:48:19 GMT
age: 76396
etag: "80e48c9ae48c89598780736b089c98e22d58df9a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5edcd9aee78a6cacc9241b47cbce598
f95b843029e84dbb188427a8c2ff8c9f32740465
6a56c3d0eb1d641e565d3d7d31b42be03bdad30beb20b994ffc9a6f2aaceee1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f739db-1c27-4929-8aff-997c0f66b2ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5650
x-amzn-requestid: 6badb939-afe6-4432-a0ad-3a2b7f85a7e0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1G-rFbuIAMFTeA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b852a-3e9ac3331503b41d5e734a01;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:42:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: PeFdtN-ow0NE39XAV9pCHX9VSno5L9z56rg-T6Bd1fks7f1ESDDzWA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:48:27 GMT
etag: "f95b843029e84dbb188427a8c2ff8c9f32740465"
content-type: image/jpeg
age: 76388
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af5773255351157d72c28a670a355c60
c803e5866edbe6c9baec14e93677f610bdf09bff
3229b4aa1c698647ad96d114174782549ad240f1b2c4ba8c268165a16afc84f0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10754
x-amzn-requestid: 2d03531d-6055-477f-9cb6-9ea9fa27eeb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vHJ4IAMF42Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-692620e80d5b2efe1d0e3a82;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: bdc05drPTRF8msc_9Hpeh8IeNm7hRKL91vcVcmHXkT-WgSL-Xq75jw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 02:18:22 GMT
age: 60193
etag: "c803e5866edbe6c9baec14e93677f610bdf09bff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pushrev.neptuneadspush.com/tracker-v2-vapid.js?aff_id=1163&custom=v2&s2=fa13a764-3aa8-11ed-b924-916f0f135865&
200 OK 0 B URL HTTP/2 pushrev.neptuneadspush.com/tracker-v2-vapid.js?aff_id=1163&custom=v2&s2=fa13a764-3aa8-11ed-b924-916f0f135865&
IP
GET /tracker-v2-vapid.js?aff_id=1163&custom=v2&s2=fa13a764-3aa8-11ed-b924-916f0f135865& HTTP/1.1
Host: pushrev.neptuneadspush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 19:01:34 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
vary: Accept-Encoding
cache-control: max-age=2678400
cf-cache-status: MISS
last-modified: Thu, 22 Sep 2022 19:01:34 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hDCLnQ%2FrsRFx2v%2BXohsRYWEb4VPcOnS1sQlCPP4h4C3kaatss1IDMFqRgGkwgG31EzZQkHVImJgGJWbWTT%2BmhZFZD%2Bicj2uUaj9b4u6UFaQlW9XV%2FoYf3hT%2BkTqVusj847UXeZ%2BTz8zqiTrghg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ed4a3a9bb174b1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pushrev.neptuneadspush.com/javascripts/trackpush-v2-vapid.js?v=1&custom=true
200 OK 0 B URL HTTP/2 pushrev.neptuneadspush.com/javascripts/trackpush-v2-vapid.js?v=1&custom=true
IP
GET /javascripts/trackpush-v2-vapid.js?v=1&custom=true HTTP/1.1
Host: pushrev.neptuneadspush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 19:01:34 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
vary: Accept-Encoding
cache-control: max-age=2678400
cf-cache-status: HIT
age: 5990
last-modified: Thu, 22 Sep 2022 17:21:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m8FuQ9XAYNCtDhHu3R%2Fz0tie9GsyyOZ6xjMlO3NIpXxsWh48u1KGOISf0TMx5HiUvmTY%2FEKFLTfoWjs9C2wAdLMBrdkpMPCZm6O75DZAYgmwiHLhLvE6wotEoXnJuZRMsQg0%2BaA9kW44mj2Adg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74ed4a3cef9374b1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
144.202.71.48
93.184.220.29
23.36.76.226