r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14097
Expires: Tue, 29 Nov 2022 18:53:09 GMT
Date: Tue, 29 Nov 2022 14:58:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3859
Expires: Tue, 29 Nov 2022 16:02:31 GMT
Date: Tue, 29 Nov 2022 14:58:12 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4787
Cache-Control: max-age=161566
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 14:58:12 GMT
Etag: "6385df6f-1d7"
Expires: Thu, 01 Dec 2022 11:50:58 GMT
Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: y3aqAEtsPrT1R7MJqW5UXML8Q6mqmWb1P6EMhA8ZpTbDfWBZEgckWSSg6djz427im1bJu3MLijo=
x-amz-request-id: KKAYWGDSE0W432T5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 14:42:32 GMT
age: 940
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 14:19:37 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2315
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 14:58:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
49.229.152.147/
200 2.3 kB IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (511), with CRLF, LF line terminators
Hash 2aec85a4c51c0f3c6038864a2690b5be
20cdf33d5cd2f8ac809843a4989507dfe48b3f30
3cc56fb3f9d3179b05d0be35587c4f5d0a32649b54ebc0799064f692949a2c68
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: no-cache,no-store
Expires: Wed, 01 Jan 2003 12:00:00 GMT
Set-Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4; Path=/; HttpOnly
Pragma: no-cache
vary: accept-encoding
Content-Encoding: gzip
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Date: Tue, 29 Nov 2022 15:05:38 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 29 Nov 2022 14:08:56 GMT
cache-control: public,max-age=3600
age: 2956
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5401
Cache-Control: max-age=157117
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 14:58:12 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 10:36:49 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
49.229.152.147/_common/lvl5/skin/css/login_page_css.jsp
200 2.7 kB URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/css/login_page_css.jsp
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type ASCII text, with CRLF line terminators
Hash 52e05e24b8fbdac0c69a8bc4d8772ad9
9afb7ce7bc35680b0a1db56dd967e2c38fa37ce1
bd432ee98fe888fa09722077ab59079e7906a88cf8902171aab7029b07514cda
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/css/login_page_css.jsp HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/css;charset=UTF-8
Content-Length: 2697
Date: Tue, 29 Nov 2022 15:05:40 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5tfJ62Y86cHFA1B9+aBNlw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: o3xszFoF1agPQB1tL7C/91BgEN8=
49.229.152.147/_common/cjmaker.js
200 406 B URL HTTP/1.1 49.229.152.147/_common/cjmaker.js
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
Hash aba86697478d202b326086844714f1d2
1698e2cf06f5c3ef41d3155247c47599ae99d2a2
0695d723d8366c7a294cdac4803d44642663505caee371fa5d216d8e228eaf64
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/cjmaker.js HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Accept-Ranges: bytes
ETag: W/"406-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: application/javascript
Content-Length: 406
Date: Tue, 29 Nov 2022 15:05:40 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/util/browserapi.js
200 40 kB URL HTTP/1.1 49.229.152.147/_common/lvl5/util/browserapi.js
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type ASCII text, with very long lines (3950)
Hash f9ca1938605de69330e112edc810a7ac
fadc590ed3945757eb11d34443c1c3fa13fdecba
a15e8b4043d12e0f2c0411401e69a0c2a7ad55ece218eb9d77a9a8038f01df13
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/util/browserapi.js HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Accept-Ranges: bytes
ETag: W/"40498-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: application/javascript
Content-Length: 40498
Date: Tue, 29 Nov 2022 15:05:40 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollhchan.png
200 113 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollhchan.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 2 x 14, 8-bit/color RGB, non-interlaced\012- data
Hash 0524010e8637836c4b5358a913ce3141
bda2c3320c501ac832bc65b5166ff0f7159e4a97
01e73f150aa6ce9a0a4003116ab47b2b7aa1608831bcecf3963cdc8d492f3436
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/navscrollhchan.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:41 GMT
Accept-Ranges: bytes
ETag: W/"113-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 113
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollleft.png
200 245 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollleft.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 14 x 14, 8-bit/color RGB, non-interlaced\012- data
Hash 3c8a44ece0e24f7cfac6c6da43f9e4ee
6eeb08e7a9c447c61d6983a100afc5e00fdba7a4
92e2e7395772dedf2c3d578bcba579e3d4384710db31f671472238841840f8ba
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/navscrollleft.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:41 GMT
Accept-Ranges: bytes
ETag: W/"245-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 245
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollup.png
200 238 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollup.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 14 x 14, 8-bit/color RGB, non-interlaced\012- data
Hash a4b795ee78fe7fa2ef3923550ba76dfd
bb3562903fa7e5391851f75990fdc4efa387c143
8fd86a895e9cc37b9906464197ea959a28f5f2bb41290251b73175397ceb4a77
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/navscrollup.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:41 GMT
Accept-Ranges: bytes
ETag: W/"238-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 238
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollvchan.png
200 114 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollvchan.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 14 x 2, 8-bit/color RGB, non-interlaced\012- data
Hash 618545399c7b096093a667a3c0cbe78a
d9ba00e25e9866c01b3a6a97d4d05e7ced8532b3
0f6a615ee9c2e50dac9ea2bfd0b13177d69913b462a9fe351e11b0c29b8b0676
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/navscrollvchan.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:41 GMT
Accept-Ranges: bytes
ETag: W/"114-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 114
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrolldown.png
200 244 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrolldown.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 14 x 14, 8-bit/color RGB, non-interlaced\012- data
Hash bd8210174d6462f883a6a95569ee5d64
63e6a2dc7078516f695c6a377608e5525adf2b8e
2d5566a19cb4490c078ff46afc3c48c4b9a49c4690aa9c21f58e917464657fcb
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/navscrolldown.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:41 GMT
Accept-Ranges: bytes
ETag: W/"244-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 244
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollsliderh.png
200 341 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollsliderh.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 15 x 10, 8-bit/color RGB, non-interlaced\012- data
Hash 389801b525c674f1382073c8afb64365
9269ac97c38f395758ad8b00505b5a0dfcfcf86b
a464b1ea013fa292753646749f662f58e3103c3ba27d2510e9378a8fd95a6959
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/navscrollsliderh.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:41 GMT
Accept-Ranges: bytes
ETag: W/"341-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 341
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4888
Expires: Tue, 29 Nov 2022 16:19:42 GMT
Date: Tue, 29 Nov 2022 14:58:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4888
Expires: Tue, 29 Nov 2022 16:19:42 GMT
Date: Tue, 29 Nov 2022 14:58:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4888
Expires: Tue, 29 Nov 2022 16:19:42 GMT
Date: Tue, 29 Nov 2022 14:58:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4888
Expires: Tue, 29 Nov 2022 16:19:42 GMT
Date: Tue, 29 Nov 2022 14:58:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg
200 OK 3.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 22e7d3e11e78242383e452adb9299016
035a1b4a2a7889787532ec2637d5c21e06daf672
990f18423bafc9cc3daaa1bd1290313b6cb3d3a391f642d01fd6797ad4fc9ca8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51b530e0-9ee5-45ee-95e9-a687ac33f22c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3004
x-amzn-requestid: 1e6e228a-fb73-4ed3-881b-6b0e5c8297c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrFRXoAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-45059338501b45d943d7e08c;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: rmBhEB-x2sOvI7XfEpZQ0-lXEDWZ4los77q017Im-Lwb32ZLA0Zvcg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:45:15 GMT
age: 36779
etag: "035a1b4a2a7889787532ec2637d5c21e06daf672"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a2a5c8d4113d282600462749315f2c4f
e2b4d2e15bb7c086333c0da438873e4c139ba931
9b5d0e5dd11d4cbf1c78a71730cd63544170c91ab635bf3cf917827ac84874e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabddece8-6c4f-4cb5-9041-4d427b16b826.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4417
x-amzn-requestid: 01de83c2-51d2-4329-98f6-09a0edf46942
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnGEcRIAMFaXA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852960-34583b6c588a0e937fcfaa46;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wqEe45jzMOryT-E-vThc39-cLiZudKF4gn6cS3LBmeaJ2amJF5GPIA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:54 GMT
age: 61880
etag: "e2b4d2e15bb7c086333c0da438873e4c139ba931"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMo3oHpSoAMF5Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uGocx-Lv8ieJVvICjnTGQZyzaQzjVdICX2RZaNyBTQvUKeIcNxaCJQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 04:49:50 GMT
age: 36504
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83c1fedec73299637cc7dc47c48af758
2e3f7326aeea6be8a34bf2c39b34862c07bfdc41
1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:18:11 GMT
age: 42003
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 22:01:55 GMT
age: 60979
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cce27a1fe8c0222811a5ce0e7f89e1cb
28c165bac8cf68cd1b0763c311aece00672cb3a5
4530e34a47ef78c2c2b0d34a0511253a61f1927b192ab42f82361002ff10819e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9376
x-amzn-requestid: c52b3092-90d2-4289-b6e0-ab99c9d4710a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPmz3EVUoAMFWUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382eb4b-39f46c89238eff696e9f2dba;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 04:44:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ofQEhaEiX1vE25a_1xHeab9Px9zgGpk8omlX_aHmLE1oN1aZTPzWxQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 10:09:32 GMT
age: 17322
etag: "28c165bac8cf68cd1b0763c311aece00672cb3a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_down_middle.png
200 311 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_down_middle.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 7 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 53512db8c8af7dfbaa09758b9fb40a57
8a791f5871f68570cb6099f098f0f62180b9362e
2082f31c27519f07a3f6169aab09ad97a4ad01c9acd486857b42160f74719a49
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/acbutton_down_middle.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:41 GMT
Accept-Ranges: bytes
ETag: W/"311-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 311
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_down_left.png
200 523 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_down_left.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 10 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 1d417b115b62c0e6be5b904c81fe76c9
e7de5aa857d142d7214124def9da3c83ffb5e1c5
0adc70a14d127b116656d8df0a0495704bc8c5aa821d1804d64eb36d5934b2c1
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/acbutton_down_left.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:41 GMT
Accept-Ranges: bytes
ETag: W/"523-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 523
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_up_middle.png
200 307 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_up_middle.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 7 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a9ad06797a98356cddc40df41854316
75d0f5bc7e08635361da506803cd6b811e906e71
2e3726ba2b1cdbc5ebad59f6cd55cfc9b5d913ffca801d96150cbc71467121ba
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/acbutton_up_middle.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:41 GMT
Accept-Ranges: bytes
ETag: W/"307-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 307
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_up_left.png
200 646 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_up_left.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 10 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 1638ac0b937dde884c5c872961bf1e1a
e87f8f8f57af9fe2505cf03f2a8c9a74a7664986
99518646d3f1896c5e99a058ca4430d4021c207a71881ad2aaacfc83df997baf
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/acbutton_up_left.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:42 GMT
Accept-Ranges: bytes
ETag: W/"646-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 646
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_up_right.png
200 664 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_up_right.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 10 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 98d545364c37c11cdb9dbafc123eedd4
6bbbcf5ae718e3e65a36e16775c3e3dcb6d812fe
ca55d3dc862d97bb3e852185b1f0bc05b4f80bedfd4fe040b771798dbb188bf2
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/acbutton_up_right.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:42 GMT
Accept-Ranges: bytes
ETag: W/"664-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 664
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_down_middle.png
200 207 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_down_middle.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 30 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 99ff474a03ecaa0828b17c3c2fa456b3
9ebf6635d576702328172c4877d46c7c11374a1a
27d5c3f1796a93a565870e83d56d2e629c86da5650200e8f4ded29cad3d493ed
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/actionbutton_down_middle.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:42 GMT
Accept-Ranges: bytes
ETag: W/"207-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 207
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_down_right.png
200 615 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_down_right.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 16 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 773a1690146201f0611f72279f54f9c8
fbb20ded15a645cbe9158e284e9060307cb7a162
1a15b2f1aeb1e502ed46a97b32b071565fdbe619f7a2004ba52336bd6c2b81a8
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/actionbutton_down_right.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:42 GMT
Accept-Ranges: bytes
ETag: W/"615-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 615
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_down_left.png
200 555 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_down_left.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 16 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash aef7f242c678d8366e86cfa722e1ef97
4154d9154117338e6be224d27a2e53e7d69e2073
6b28aaa3c06785e791684f170dcc1861ed6c59921fa171ce4284aa0f2ec8cfad
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/actionbutton_down_left.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:42 GMT
Accept-Ranges: bytes
ETag: W/"555-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 555
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_up_left.png
200 404 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_up_left.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 16 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash e12a8b6e30cb049a7e581bf9f4bdf42b
459d6876493cb0d21c5762d9d1effc455572a433
9ad3428b01dd8bf299b9a9068ae0b9658938190151e6e8d0b6662337a57463b8
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/actionbutton_up_left.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:42 GMT
Accept-Ranges: bytes
ETag: W/"404-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 404
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_down_right.png
200 467 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/acbutton_down_right.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 10 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash cf043906a1c1c0e5b8a5cb74ad73988b
a14c342839ef665bc53efbe6d2b78e614b2ca4cf
9f33fd4c265af43e284b1d499b615d634b02c7f3a37cbcd17aaf40c38d0d0809
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/acbutton_down_right.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:42 GMT
Accept-Ranges: bytes
ETag: W/"467-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 467
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/logo.png
200 104 kB IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 432 x 413, 8-bit/color RGBA, non-interlaced\012- data
Size 104 kB (104385 bytes)
Hash 5fa425643458d65b4d55b62c971eef41
874d0e29f231ad1b6b502913c71e17437eeeb65a
cff67199a1ceac017c119c2786f5583f3f8a7a332df4f70a37c5427f36c404dd
Analyzer Verdict Alert quad9 Sinkholed
GET /logo.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Accept-Ranges: bytes
ETag: W/"104385-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 104385
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/jslib/jquery-3.2.1.min.js
200 87 kB URL HTTP/1.1 49.229.152.147/_common/lvl5/jslib/jquery-3.2.1.min.js
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type ASCII text, with very long lines (32058), with CRLF line terminators
Hash 473957cfb255a781b42cb2af51d54a3b
67bdacbd077ee59f411109fd119ee9f58db15a5f
75b707d8761e2bfbd25fbd661f290a4f7fd11c48e1bf53a36dc6bd8a0034fa35
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/jslib/jquery-3.2.1.min.js HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Accept-Ranges: bytes
ETag: W/"86663-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: application/javascript
Content-Length: 86663
Date: Tue, 29 Nov 2022 15:05:41 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_up_right.png
200 445 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_up_right.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 16 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash cb5ba54eadbaf61bc6645f1c6b047e23
5a7726ffb8551384ba0937e4b8701fce9bc94597
3e38d433649fd6f17f0fff3a355c62ca438dcfd264a109828abe33f044ae9c9f
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/actionbutton_up_right.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"445-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 445
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_up_middle.png
200 169 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/actions/actionbutton_up_middle.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 30 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 6d9f48faf538da7959ce8229edde1d6c
aab322ddaa87297ee953a23558b99f31f725cdd3
c1b21aaac626a5127a4a4a94f13c8f200f89a76d367fd4755b6da7f589968e29
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/actions/actionbutton_up_middle.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"169-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 169
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/facets/facettab_down_middle.png
200 378 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/facets/facettab_down_middle.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 10 x 21, 8-bit/color RGB, non-interlaced\012- data
Hash 209076b11e045b8ee46a0ae7b6a34ec7
25b7e5c5aa5e4de2cf766830a440438746449ab5
48ac7750153a37d620c30daa2d0035b272d56ff25ecb8bdb84c2325f653c2f96
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/facets/facettab_down_middle.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"378-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 378
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/facets/facettab_up_middle.png
200 133 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/facets/facettab_up_middle.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 10 x 21, 8-bit/color RGB, non-interlaced\012- data
Hash 5e70511da0ed0ff3cd9ceb4225e6d75a
05a0fdc630b687d2a4a166a7a0a5222624aa489d
2d304bcce2a00ddbf59636f5371107630560b3d6f10ce2b2458cf45609f2b870
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/facets/facettab_up_middle.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"133-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 133
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/buttons/textbutton_down_middle.png
200 170 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/buttons/textbutton_down_middle.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 2 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash e3721691a00df7f8800a24d1a6071dff
1233b5287780ef1875fd488ec84628be04c1e3df
0cf876e239da1e5facfcafb26cbc1e8af73d4c990b2cb0ea80b95a72c3772090
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/buttons/textbutton_down_middle.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"170-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 170
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/buttons/textbutton_up_middle.png
200 171 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/buttons/textbutton_up_middle.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 2 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash 242053f12512dae323cf49e9720063e2
0735f4dab88c03afeed91c207ea497de06360668
dc4d3cd4ee2dfb99a03123528f2b88c313273fb9720a6cf98504f7b89999b04b
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/buttons/textbutton_up_middle.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"171-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 171
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointtempindicator.gif
200 820 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointtempindicator.gif
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type GIF image data, version 89a, 4 x 15\012- data
Hash 60ffa0862bf8f054e6b06e00934e7942
0fd18a44532b64ba04ddf24872833eb27f3ba56f
062af2e193510b959a183b6a8090902f8df971883e7958b88118046c71f814e7
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointtempindicator.gif HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"820-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/gif
Content-Length: 820
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointheader.png
200 955 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointheader.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 449 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash cf97000d3fe285491e5f6797a99477b1
56380ae00889fa32b6e01c9a517a83dc4c660c23
7276c22ce38ade32bd881820b005f33fca82d755f8df03eb17ceb65734f04fe9
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointheader.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"955-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 955
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointbody.png
200 196 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointbody.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 449 x 15, 8-bit/color RGB, non-interlaced\012- data
Hash fd9a9490e676292724596e48e3601541
dc6be8c81302b3a799d7c2b721e2fced7be302e4
42d75f5b0ccd0b7481b52888919235d70f3b337366cdc3265114f34256927f89
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointbody.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"196-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 196
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointfooter.png
200 595 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointfooter.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 449 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 70c5f46e17b57e88d828a95d5e2d005e
8b2c291449e23bfb82cb018c7b840f9cd736bf33
61a45fbe1c275977cf2b34ac513eea53867cdc09764644a0e6db9ac7c2995657
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/properties/equip_templates/setpt_graphics/setpointfooter.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"595-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 595
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/patterns/uphashes.gif
200 872 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/patterns/uphashes.gif
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type GIF image data, version 89a, 16 x 16\012- data
Hash f9600e62e46ccff7207a62372b977da5
d996e64cc3f61b6be15feed41c67cb0fd98b593c
c16d02467aff1a9927d99fa111626252ee4f3c8f210ca357e30cce0c14cc1903
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/patterns/uphashes.gif HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"872-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/gif
Content-Length: 872
Date: Tue, 29 Nov 2022 15:05:42 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/patterns/horiz.gif
200 63 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/patterns/horiz.gif
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type GIF image data, version 89a, 16 x 16\012- data
Hash 4474016f91a90123f9ba356ef6904d75
8b91fc4417c0914dabbaf078a098c87582f8f18c
2ea902dd6e16174f97cf190b2cea96c4449d63934d6abd8043153393eb2bcc6c
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/patterns/horiz.gif HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"63-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/gif
Content-Length: 63
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/patterns/leftdiagonal.gif
200 62 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/patterns/leftdiagonal.gif
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type GIF image data, version 89a, 12 x 12\012- data
Hash 4a7c50c579d8eb01461c9546f82451ae
0b6cc8a1e4ecb5b7e7240cd773b826928b7d5b33
ff1a2fd1581fdb60840bcf9ef68f4ccadd7582d5a91237a46f7ac864403dbf77
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/patterns/leftdiagonal.gif HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"62-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/gif
Content-Length: 62
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/patterns/vert.gif
200 854 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/patterns/vert.gif
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type GIF image data, version 89a, 16 x 16\012- data
Hash 63c06b443ce9cb9d57300ee3111606a7
244beb4415c0423de0e62dcb8b1f7f25db59a055
19eccd248ee1e03372a409e00cc03d8e3e234d34eca66510217a0b5c53abc14e
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/patterns/vert.gif HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"854-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/gif
Content-Length: 854
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/patterns/tickbackground.gif
200 872 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/patterns/tickbackground.gif
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type GIF image data, version 89a, 16 x 16\012- data
Hash f9600e62e46ccff7207a62372b977da5
d996e64cc3f61b6be15feed41c67cb0fd98b593c
c16d02467aff1a9927d99fa111626252ee4f3c8f210ca357e30cce0c14cc1903
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/patterns/tickbackground.gif HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"872-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/gif
Content-Length: 872
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/patterns/squares.gif
200 868 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/patterns/squares.gif
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type GIF image data, version 89a, 16 x 16\012- data
Hash ecb55778c47ea43396e5a961a1d58c75
be449ed8e1320289527b871fb479675c87bf4a3b
a253012b3f6b014b2dd84b42c8cc32efc193cdb6785cfeff5077b89649b98ba7
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/patterns/squares.gif HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"868-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/gif
Content-Length: 868
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/main/schedulefooter_12.png
200 796 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/main/schedulefooter_12.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 546 x 30, 8-bit/color RGBA, interlaced\012- data
Hash d977f4f1384d66bf8b1ef8ac2e507c62
cc0cbe1fb0793f0de4aaed2241afd55251f92143
d8145595ae7cc974b53b50460bc6af82693d8d6eabcf13699493962f90b4cc18
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/main/schedulefooter_12.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:43 GMT
Accept-Ranges: bytes
ETag: W/"796-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 796
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/main/schedulefooter_24.png
200 895 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/main/schedulefooter_24.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 546 x 30, 8-bit/color RGBA, interlaced\012- data
Hash 63e6203b31e0e41dc6ff576fefcf9e73
5457ac95debebf924955941beacdce490d901f5f
998056c6307fa333dae43e058cf8f6353b0cb91a0daca57e367ca699103d8c39
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/main/schedulefooter_24.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:44 GMT
Accept-Ranges: bytes
ETag: W/"895-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 895
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/main/scheduleheader.png
200 527 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/main/scheduleheader.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 546 x 45, 8-bit/color RGBA, interlaced\012- data
Hash bf671bba32a4380cfc6adf2b98fe4e12
90c492523634d0e7804c801a0aa5ec0b39932a9b
09567017b77ba74d2a304e128a856d7ee81dbfd4c8ee2ee7bb45af0dd570d2c1
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/main/scheduleheader.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:44 GMT
Accept-Ranges: bytes
ETag: W/"527-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 527
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/main/schedulebody.png
200 297 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/main/schedulebody.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 546 x 15, 8-bit/color RGBA, interlaced\012- data
Hash 29a041e5c48c7e62c8ed59c20db91c60
a04425d9ca49e41b763c21bb83d77324031197fe
55fbf7a11740800966717d2b4441740ee523eb67cb320c92a1db5d0194c8660f
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/main/schedulebody.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:44 GMT
Accept-Ranges: bytes
ETag: W/"297-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 297
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/graphics/main/trpixel.gif
200 42 B URL HTTP/1.1 49.229.152.147/_common/lvl5/graphics/main/trpixel.gif
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/graphics/main/trpixel.gif HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:44 GMT
Accept-Ranges: bytes
ETag: W/"42-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/gif
Content-Length: 42
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/scrolldown.png
200 203 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/scrolldown.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash f2c7778f1b442600f767c30a84d79a6b
f166b2bc01a47d9e756e050007e197f610aa3dbe
288bcc2f234c3a2bab8966132b34e9efcec830ffe2eb77c37d0238b22c023db0
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/scrolldown.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:44 GMT
Accept-Ranges: bytes
ETag: W/"203-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 203
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/scrollup.png
200 203 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/scrollup.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 6102294cf86aa4a862463bb7ac23f297
f5a698815de518eef72ee5408669751f0f7e709f
7fcc780a3bcd3ac4b4e897e74b42fa7b63de2b2540398f5be11e7bb999554f3d
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/scrollup.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:44 GMT
Accept-Ranges: bytes
ETag: W/"203-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 203
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/scrollleft.png
200 223 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/scrollleft.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 4bd75ef039451fe44214eb9af98c04ba
48188fec24192f114f7fba4496a7362461364ada
0007f9e0b912d9c18be775b5d92d87356fb196b6d60206e892f2c39397f0f12c
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/scrollleft.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:44 GMT
Accept-Ranges: bytes
ETag: W/"223-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 223
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/scrollright.png
200 215 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/scrollright.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 80382797e4883ec16fea42344cf085c2
3c9c235df0182765beb225fd416fe76e6f8feb91
b587ca12e3a15f503be8315704103bbb1be32088445b79e3cb4aac2528f86f5c
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/scrollright.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:44 GMT
Accept-Ranges: bytes
ETag: W/"215-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 215
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollsliderv.png
200 359 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollsliderv.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 10 x 15, 8-bit/color RGB, non-interlaced\012- data
Hash 19100bfa2ed9c068042ae2c18e845953
410e30e22262e95ad9a01920ee23c16828274b27
fd69e5327ec742c91a6c969cc991bc3704786977bfe8aa3295c84a85d0fc26ea
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/navscrollsliderv.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:44 GMT
Accept-Ranges: bytes
ETag: W/"359-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 359
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollright.png
200 238 B URL HTTP/1.1 49.229.152.147/_common/lvl5/skin/graphics/scrollbar/navscrollright.png
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type PNG image data, 14 x 14, 8-bit/color RGB, non-interlaced\012- data
Hash 8e2fd143a7c6bf716b9a6285e3a18a38
08203fbfa24c3301fb06ef8e1afa6790a5edabfd
1b722f42b840190f4eb0e1690160b03e79ac73c297f8e1a29313561047ec01be
Analyzer Verdict Alert quad9 Sinkholed
GET /_common/lvl5/skin/graphics/scrollbar/navscrollright.png HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Tue, 29 Nov 2022 16:05:44 GMT
Accept-Ranges: bytes
ETag: W/"238-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/png
Content-Length: 238
Date: Tue, 29 Nov 2022 15:05:43 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147/favicon.ico
200 5.4 kB URL HTTP/1.1 49.229.152.147/favicon.ico
IP
ASN #45458 SBN-ISPAWN-ISP and SBN-NIXAWN-NIX
File type MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash f98828c4dbaf7f9fea90dae59ebc5c49
9d5aedd9de5bd353327acc066b1e078e9fe827e5
c2a9c6bd475d502c0678744fe6f8013c74b45184b2185b9e7428e5c405332a85
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: 49.229.152.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://49.229.152.147/
Cookie: JSESSIONID=4ADA4258EFC94F6231A87E9DE63490C4
HTTP/1.1 200
X-FRAME-OPTIONS: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; img-src 'self' data:; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'
Cache-Control: private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Accept-Ranges: bytes
ETag: W/"5430-1607638056000"
Last-Modified: Thu, 10 Dec 2020 22:07:36 GMT
Content-Type: image/x-icon
Content-Length: 5430
Date: Tue, 29 Nov 2022 15:05:44 GMT
Keep-Alive: timeout=5
Connection: keep-alive
Server: CJServer/1.1
49.229.152.147
34.160.144.191
23.36.77.32
93.184.220.29