Overview

URLwww.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
IP 95.211.200.52 (Netherlands)
ASN#60781 LeaseWeb Netherlands B.V.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-23 03:41:55 UTC
StatusLoading report..
IDS alerts0
Blocklist alert4
urlquery alerts No alerts detected
Tags None

Domain Summary (29)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-26T05:10:29Z 606 127 44.226.72.95
connect.facebook.net (1) 139 2012-05-22T04:51:28Z 2023-03-26T05:09:01Z 377 29370 157.240.200.14
ajax.googleapis.com (2) 12905 2013-08-16T11:51:31Z 2023-03-26T12:52:57Z 797 99265 142.250.74.42
fonts.gstatic.com (1) 0 2014-09-09T02:40:21Z 2023-03-26T11:13:51Z 507 45688 216.58.207.227
forgivenessimpact.com (1) 0 2021-09-30T01:03:04Z 2023-03-26T04:02:40Z 405 21420 192.243.59.20
fonts.googleapis.com (1) 8877 2013-06-10T22:14:26Z 2023-03-26T12:48:47Z 410 630 142.250.74.42
ocsp.digicert.com (2) 86 2012-05-21T09:02:23Z 2023-03-26T13:08:42Z 682 1598 192.229.221.95
r3.o.lencr.org (13) 344 2020-12-02T09:52:13Z 2023-03-26T05:09:13Z 4394 11522 23.36.77.32
usingswhoring.com (1) 0 2022-08-11T01:59:06Z 2023-03-26T04:02:40Z 377 1378 23.109.87.81
henoticpipi.com (2) 0 2022-08-16T13:00:44Z 2023-03-26T04:02:40Z 1357 1954 23.109.248.164
ocsp.r2m01.amazontrust.com (1) 0 2022-10-12T22:43:53Z 2023-03-26T11:01:31Z 350 1006 54.230.80.227
engagesrvr.filefactory.com (1) 0 2017-06-24T03:49:29Z 2023-03-26T04:02:29Z 466 607 213.227.142.34
ssl.google-analytics.com (1) 275 2012-10-02T06:58:30Z 2023-03-26T14:33:58Z 369 17698 142.250.74.8
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-26T05:09:08Z 3246 46503 34.120.237.76
banquetunarmedgrater.com (1) 0 2022-08-04T17:12:50Z 2023-03-25T15:42:34Z 378 327 192.243.61.227
www.facebook.com (2) 99 2012-05-21T02:23:41Z 2021-02-04T00:31:35Z 1761 698 157.240.200.35
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-26T05:09:18Z 782 2374 35.241.9.150
ocsp2.globalsign.com (1) 1544 2012-05-23T20:10:04Z 2023-03-26T05:09:29Z 357 1886 104.18.20.226
filefactory.com (1) 160487 2012-06-25T15:00:13Z 2023-03-26T04:02:39Z 505 432 95.211.200.52
mc.us6.list-manage.com (1) 106968 2015-01-19T17:24:20Z 2023-03-26T04:02:28Z 522 8416 104.110.24.122
engagecdn.filefactory.com (3) 0 2017-06-24T03:49:29Z 2023-03-26T04:02:29Z 2108 192539 89.149.201.79
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-26T05:11:59Z 333 391 34.117.237.239
ocsp.pki.goog (9) 175 2018-07-01T08:43:07Z 2023-03-26T05:10:41Z 3087 6293 142.250.74.163
chimpstatic.com (1) 4832 2017-04-21T07:35:42Z 2023-03-26T05:14:40Z 433 1800 96.6.17.210
lighthousemissingdisavow.com (1) 0 2023-03-12T04:39:16Z 2023-03-26T01:47:08Z 460 467 192.243.59.13
www.filefactory.com (18) 509465 2012-05-21T20:23:06Z 2023-03-26T04:02:25Z 9730 123900 95.211.200.52
simplewebanalysis.com (1) 0 2022-02-25T05:06:25Z 2023-03-26T12:32:05Z 399 412 54.93.153.146
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-26T05:11:12Z 413 5882 34.160.144.191
downloads.mailchimp.com (6) 11609 2012-05-23T20:26:46Z 2023-03-25T18:24:35Z 2662 106057 54.230.111.28

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-03-23 medium henoticpipi.com/g9RbYoQO26rZA3R/55129 Malware
2023-03-23 medium forgivenessimpact.com/b6/6f/f7/b66ff7c1636b152673f970d2464db83f.js Malware
2023-03-23 medium henoticpipi.com/g9RbYoQO26rZA3R/55129 Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2023-03-22 medium lighthousemissingdisavow.com Sinkholed

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 95.211.200.52
Date UQ / IDS / BL URL IP
2023-05-16 03:21:55 UTC 0 - 1 - 0 www.filefactory.com/file/7851p3xh8dti/qzpt3a1 (...) 95.211.200.52
2023-04-19 00:51:59 UTC 0 - 0 - 5 filefactory.com/file/3z7c9jdddz7z/ny_flac_1971.zip 95.211.200.52
2023-04-19 00:51:57 UTC 0 - 0 - 4 www.filefactory.com/file/3z7c9jdddz7z/ny_flac (...) 95.211.200.52
2023-04-19 00:51:54 UTC 0 - 0 - 5 filefactory.com/file/4zao6g5ay8xb/ny_1971.zip 95.211.200.52
2023-04-19 00:51:39 UTC 0 - 0 - 5 filefactory.com/file/4zao6g5ay8xb/ny_1971.zip 95.211.200.52


Last 5 reports on ASN: LeaseWeb Netherlands B.V.
Date UQ / IDS / BL URL IP
2023-06-02 04:33:53 UTC 0 - 1 - 4 lysyfyj.com/LknTZ/login.php/ 95.211.219.67
2023-06-02 04:33:53 UTC 0 - 1 - 4 lysyfyj.com/LknTZ/login.php 95.211.219.67
2023-06-02 04:33:47 UTC 0 - 2 - 4 lysyfyj.com/XcknZ/login.php 95.211.219.67
2023-06-02 04:22:55 UTC 0 - 2 - 4 lysyfyj.com/YUTYZ/login.php 95.211.219.67
2023-06-02 04:22:51 UTC 0 - 2 - 4 lysyfyj.com/YUTYZ/login.php/ 95.211.219.67


Last 5 reports on domain: filefactory.com
Date UQ / IDS / BL URL IP
2023-05-16 03:21:55 UTC 0 - 1 - 0 www.filefactory.com/file/7851p3xh8dti/qzpt3a1 (...) 95.211.200.52
2023-04-19 00:51:59 UTC 0 - 0 - 5 filefactory.com/file/3z7c9jdddz7z/ny_flac_1971.zip 95.211.200.52
2023-04-19 00:51:57 UTC 0 - 0 - 4 www.filefactory.com/file/3z7c9jdddz7z/ny_flac (...) 95.211.200.52
2023-04-19 00:51:54 UTC 0 - 0 - 5 filefactory.com/file/4zao6g5ay8xb/ny_1971.zip 95.211.200.52
2023-04-19 00:51:39 UTC 0 - 0 - 5 filefactory.com/file/4zao6g5ay8xb/ny_1971.zip 95.211.200.52


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-04-04 21:00:37 UTC 0 - 0 - 5 www.filefactory.com/file/3gln8wf8qto1/CakMan3 (...) 95.211.200.52
2023-04-01 09:37:28 UTC 0 - 0 - 4 www.filefactory.com/file/1bob9qguzjly/STIFF_C (...) 95.211.200.52
2023-04-01 09:35:30 UTC 0 - 0 - 3 www.filefactory.com/file/4xat9ccf8l8q/READY_W (...) 95.211.200.52
2023-04-01 09:32:27 UTC 0 - 0 - 4 www.filefactory.com/file/pw3bw7xtofg/THE_RIGH (...) 95.211.200.52
2023-04-01 09:30:24 UTC 0 - 0 - 4 www.filefactory.com/file/rmf144y4vq4/s1nggou- (...) 95.211.200.52

JavaScript

Executed Scripts (29)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 158) - SHA256: d1167e3b70947916f421c7e95057bdf8910f7ba485e3716107c9fa1cf6403437
< !DOCTYPE html > < html > < head > < meta name = "viewport"
content = "width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" / > < /head><body></body > < /html>


HTTP Transactions (83)


Request Response
                                        
                                            GET /file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             95.211.200.52
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 178
Connection: keep-alive
Location: https://filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4383
Expires: Thu, 23 Mar 2023 04:54:47 GMT
Date: Thu, 23 Mar 2023 03:41:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "59553A312D3FB34F1F0AEA469F7E7CC810FF9993481DDBD73EA5D461CF97ED51"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14044
Expires: Thu, 23 Mar 2023 07:35:48 GMT
Date: Thu, 23 Mar 2023 03:41:44 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 03:15:05 GMT
age: 1599
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bc86ef2a0cee04915bc360f5821adc8f
Sha1:   3658f9028cce204d38f7f48fcfaa2a8e4f54383a
Sha256: aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16889
Expires: Thu, 23 Mar 2023 08:23:13 GMT
Date: Thu, 23 Mar 2023 03:41:44 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: F0qz8dixu13MTizTGsxE/OV9aHJoka7tdLkCpmGCoZiTvZUfyySDyiuMsZiNXDpiD6PnhPaXzI8=
x-amz-request-id: XNA2NJERX55NZVG7
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 02:53:53 GMT
age: 2871
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 03:41:44 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 27 Mar 2023 03:02:11 GMT
ETag: "70ca7663875b84a53bd51c28fac03fb27fd2e708"
Last-Modified: Thu, 23 Mar 2023 03:02:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ac3a90f9a0cb4f4-OSL


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    78f2338a9481674e183ad5bb198930a1
Sha1:   70ca7663875b84a53bd51c28fac03fb27fd2e708
Sha256: 35de33568f49ce8ee06ebd88069988e9b044a95bfd14384b7ac7a312aceb4b6b
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 23 Mar 2023 03:41:44 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z HTTP/1.1 
Host: filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             95.211.200.52
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 178
Connection: keep-alive
Location: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 4983
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; path=/ locale=en_US.utf8; expires=Fri, 24-Mar-2023 03:41:44 GMT; path=/; domain=.filefactory.com LBPERSIST=persist_w1; path=/
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  data
Size:   4983
Md5:    07c058aded4b658d58730c27b63a1398
Sha1:   811f88b67e77d7432565093c0fe4ec4d93cd9ecc
Sha256: f1709603e2736061b05afdaf70d0b93523dcf99a6b66c8a46ae4dcd2100e235a
                                        
                                            GET /css/vendor/bootstrap.min.css?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 18734
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:29 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (65371)
Size:   18734
Md5:    d9c4e81d89198caf489562c850e6c515
Sha1:   e3da6be0dca0ea45d190dd5fe3ac3f7fda0219fb
Sha256: 8243a13ef5d4e10a2ff5b6f171137f74c77b1ccff30b1e7157779242196e04cd
                                        
                                            GET /js/vendor/bootstrap-dialog.js?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 4188
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (16771), with no line terminators
Size:   4188
Md5:    2e9e8a0844e9bb269412720e30ec518c
Sha1:   4e1ef0cfa65000b885a1d9512e030edb354eff44
Sha256: a94d3e76ce47a9501f02dbe231a9f7c4b1a8a9dae4a74497dd551a4aa349a58a
                                        
                                            GET /css/vendor/bootstrap-dialog.css?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 516
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (2012), with no line terminators
Size:   516
Md5:    0369f3f2323383c427de48d1826d3f36
Sha1:   c4badfee0621c82fc0a10920d3228cea11111378
Sha256: 47910de5c7f0bb200606b508202690a36dc0055805dffe7b6972fc037430a3c4
                                        
                                            GET /css/filefactory.wp.css?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 2030
Connection: keep-alive
Last-Modified: Tue, 14 Aug 2018 04:54:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   2030
Md5:    8abbab6476fafabcaf7f435f4c498f21
Sha1:   86fce7af2f73e7dc00689c46ed7a7aa6ca777ff8
Sha256: 953878b3e7c4fe71dea5a70200582d38ef6a178f7f83095b677aa3f50dd37d38
                                        
                                            GET /css/filefactory.wp.download.css?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 651
Connection: keep-alive
Last-Modified: Sat, 17 Jun 2017 04:44:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  assembler source, ASCII text
Size:   651
Md5:    67670bc7620a54bc2d4e7dec96399e77
Sha1:   3c84a45236e315a038a1598cc0a229c42d799c86
Sha256: 404089245c8aaa3a29cf57f852d664bbdb49f8aafd57708f3da51c18a35b5a43
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 03:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/vendor/bootstrap.min.js?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 9691
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (36622), with no line terminators
Size:   9691
Md5:    19ffde9db3c06677e3c134246a77dc4a
Sha1:   4787610b6ee20909c031e97e5045c18496c8e4b7
Sha256: 12fae54989d035cf72a58295e88ede408b1470096bfa620fd31523e3c742bf45
                                        
                                            GET /js/filefactory.common.js?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 1700
Connection: keep-alive
Last-Modified: Tue, 07 May 2019 08:33:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (2383), with CRLF line terminators
Size:   1700
Md5:    2c07a42028cdc50efce1586cc7175ba8
Sha1:   dc1a5da5eb06d466cc8860cd593bc7a0cf2b99ac
Sha256: 31f1cf190e5db84a4eebafd0bcbb48f80c2d3f0c9346f6e00406937fc5b8ba7e
                                        
                                            GET /js/vendor/jquery.cookie.js?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 616
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1143), with no line terminators
Size:   616
Md5:    9dc410259b911c91103b71b0da4db1b4
Sha1:   8bbfe01b65bd9ba687c1407131f7dd4d31ca51e3
Sha256: 76c01394e846761a9d20c84a4919d42558cb6619ec2c44577681e72f495e853a
                                        
                                            GET /js/vendor/jquery.selectBoxIt.js?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 7079
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:55 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (25709), with no line terminators
Size:   7079
Md5:    3418e0d552b349825bcbba8c5446d4c5
Sha1:   ac15f8e5059dd7f535538dbafb51d3dbb1aad877
Sha256: 6ee9075e709af09965a6b769d7fc6ca5825039dacad075112033b0235171f043
                                        
                                            GET /js/vendor/countdown.js?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 837
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (3495), with no line terminators
Size:   837
Md5:    427a0fc92994a6b92d0f4b65d1bee5aa
Sha1:   4f59883fd8e3e861872e76095beaa05e59b9037a
Sha256: 39fda67bbaba8165bcb44293edde7410ff29e149866141fc25e9774d7bfd7327
                                        
                                            GET /js/vendor/jquery.zclip.js?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 2603
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:37:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (7482), with no line terminators
Size:   2603
Md5:    15514f102ce938370faf62a5935f98a4
Sha1:   9ab90f99b5113a7eacc89cf495e6d00bf7a97abf
Sha256: c8e2aebf568b1b0d4d96818f40020d0681a0ab5a7ff9ba2f61f546593559c9f1
                                        
                                            GET /ajax/libs/jqueryui/1.11.1/jquery-ui.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.42
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 63865
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:13 GMT
expires: Thu, 21 Mar 2024 18:05:13 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
vary: Accept-Encoding
age: 34591
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32119)
Size:   63865
Md5:    5fff368bebfbbc83919d7ddd9afac949
Sha1:   8b89f7c5ab4700ef0289ff30142082bd108e0354
Sha256: a8969e8853f473ca839e9728872e08c1f0ac0851fe1431d29fa5ed7382910990
                                        
                                            GET /js/vendor/countdown_plugins.js?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 14997
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (45450), with no line terminators
Size:   14997
Md5:    f34475e9958e420955c700820b870ded
Sha1:   ef50b2ea27da3fe99502e01c5320a8a0b80de17f
Sha256: 1205aa096ef6cdffe92d6705b7c0e1b1a963b1d3c5a86816c0a5362b6ab3d5b2
                                        
                                            GET /js/filefactory.download.js?v=004000000024 HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 3941
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:35 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Sat, 22 Apr 2023 03:41:44 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (12559), with no line terminators
Size:   3941
Md5:    0e8beb3e9e301026a8696b9b8ac607d5
Sha1:   b0e8de3dc6fd295f87bbb4495639811a5ac02eae
Sha256: d25eddf5332fcc8d069e66ec73a005e34d8d59d0d98d09780758af14fb310eff
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 03:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 03:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 03:41:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.42
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:11 GMT
expires: Thu, 21 Mar 2024 18:05:11 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
vary: Accept-Encoding
age: 34593
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32086)
Size:   33434
Md5:    430e927c980ad4079de727fa59dd93f2
Sha1:   891aaada9a55a91292999f6d50fd300439905982
Sha256: e8728df8617340bd8c10bc8d27d3a725a48871a269c850e8598689938ec6e2ed
                                        
                                            GET /wp/img/filefactory-logo-white.svg HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:26 GMT
Content-Length: 6174
Connection: keep-alive
Last-Modified: Thu, 15 Jun 2017 23:34:39 GMT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   6174
Md5:    249acd65dbe7bf8bdf2477d1a7a1bdee
Sha1:   f322b0d7e66ee18be95a820e463e957cc50e1238
Sha256: 8cd74251eda091402e01f67f217f5a466d87d0111cc9b5724a831cf21a938cd8
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "841102E25F1DBC66763D73333A374BC44FF338D95EE9A4EBB32B25FBCC4A811E"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14456
Expires: Thu, 23 Mar 2023 07:42:40 GMT
Date: Thu, 23 Mar 2023 03:41:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "FACBDEE956B06E0284532F61B59C5A2DCB46D15F2D43AD7E97D5A701A63A15D6"
Last-Modified: Wed, 22 Mar 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2707
Expires: Thu, 23 Mar 2023 04:26:51 GMT
Date: Thu, 23 Mar 2023 03:41:44 GMT
Connection: keep-alive

                                        
                                            GET /r3ZwU3RRZQUni7/55128 HTTP/1.1 
Host: usingswhoring.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.109.87.81
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:41:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.filefactory.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Fri, 24-Mar-2023 03:41:44 GMT; Max-Age=86400; path=/; secure; SameSite=None GL_GI10=eJw9i7sOgkAURAENEQXMJH6APyA%2BgoWtWhoojPUG8Wo2wl7Crg%2F8elETq5mcOWNZljMK4cgK%2FmoerWZRvIjmyxidCzGcJIWf802ZuhEqKwluwvUja%2BDWdJGsAgx%2BReR8IvSTdHJQV8UP9R8%2BtwDdXJomgPeJrxv20JG6Qrgu5HO85%2BJmWlvDU2SErohO8DbZsaDpdr9D%2BKffs2ujJ7Woan42bR8aWdKLFQk%2BnzWZFtl313kDsc5BIg%3D%3D; expires=Fri, 24-Mar-2023 03:41:44 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   25
Md5:    2339750dbbbcbd8fe83612a65b72e03d
Sha1:   672074d493c051cffcc96bce7d15f77ec6ef1889
Sha256: 1fa220e7725025343d910d83e9f0e663b82419a3422e5465dc73c092b0853ccd
                                        
                                            GET /g9RbYoQO26rZA3R/55129 HTTP/1.1 
Host: henoticpipi.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.109.248.164
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:41:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.filefactory.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Fri, 24-Mar-2023 03:41:44 GMT; Max-Age=86400; path=/; secure; SameSite=None GL_GI10=eJw9i7sOgkAURAENEQXMJH6APyA%2BgoWtWhoojPUG8Wo2wl7Crg%2F8elETq5mcOWNZljMK4cgK%2FmoerWZRvIjmyxidCzGcJIWf802ZuhEqKwluwvUja%2BDWdJGsAgx%2BReR8IvSTdHJQV8UP9R8%2BtwDdXJomgPeJrxv20JG6Qrgu5HO85%2BJmWlvDU2SErohO8DbZsaDpdr9D%2BKffs2ujJ7Woan42bR8aWdKLFQk%2BnzWZFtl313kDsc5BIg%3D%3D; expires=Fri, 24-Mar-2023 03:41:44 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   26
Md5:    4e5d65669f8dcd928dad06adf883f025
Sha1:   d771713d758c3348dd7e5b38bb40c7935399ae46
Sha256: 0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wp/img/icon-check.svg HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:27 GMT
Content-Length: 22124
Connection: keep-alive
Last-Modified: Thu, 15 Jun 2017 23:34:39 GMT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , Unicode text, UTF-8 text, with very long lines (19596)
Size:   22124
Md5:    579390788f26cffc187c3b213e7d6de8
Sha1:   e59bf4557c47f482b1b354957151e6497b0d7ded
Sha256: ba629a33ef0767607e2539945008431805ea1d2d2ebc4ffd877ab3c3b23991a7
                                        
                                            GET /mcjs-connected/js/users/cc27616a935143f3234e68708/058c28910046bb6b1c91d8684.js HTTP/1.1 
Host: chimpstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             96.6.17.210
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
x-amz-id-2: Kw8NyVkAhaEzpbBAe1UULVkCfyhPyXiK6756y+dTLUGJM/92rDCGNMDIAFMZyiyf8eLaANJiM/w=
x-amz-request-id: BH396Q8W05D9PSXE
Last-Modified: Wed, 26 Oct 2022 04:19:23 GMT
ETag: "f93507267e71f50f984e4493f1eec056"
Accept-Ranges: bytes
Server: AmazonS3
X-EdgeConnect-MidMile-RTT: 17
X-EdgeConnect-Origin-MEX-Latency: 96
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1439
Expires: Thu, 23 Mar 2023 04:05:43 GMT
Date: Thu, 23 Mar 2023 03:41:44 GMT
Content-Length: 1223
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text
Size:   1223
Md5:    8273d84537cadc5b9a2e738d212a798d
Sha1:   2b428dac0ccadd8ad81471b89b983a6ab83cb58c
Sha256: 26b0237c699edce2075e43f5a8dd37c73e091a06ac0bee1de767bf0c4dbba16e
                                        
                                            GET /wp/img/icon-cloud.svg HTTP/1.1 
Host: www.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/34jrovpljx8s/1996%20-%20J%20Dilla%20-%201996%20Batch.7z
Cookie: PHPSESSID=8va5flms90esnapieil47m4r44; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

                                        
                                             95.211.200.52
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:08:27 GMT
Content-Length: 17092
Connection: keep-alive
Last-Modified: Thu, 15 Jun 2017 23:34:39 GMT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , Unicode text, UTF-8 text, with very long lines (14564)
Size:   17092
Md5:    1036571f93a23865267246ebf737a0c2
Sha1:   5a08d068303aecabf2fdc2d203101f8063a3cc42
Sha256: e751c9f7db67a14fa7e5c3a51a8c62a4e3a151a06cc2f0bcec8e11ca6c2c57fe
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 03:14:33 GMT
age: 1632
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 03:41:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 03:41:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.filefactory.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:11 GMT
expires: Thu, 21 Mar 2024 18:05:11 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
age: 34594
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 03:41:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DU8BbcWJQtlJgOsEg/KcEQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             44.226.72.95
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +u0AT1CaD8aBBIWlgAKwesOBDxY=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "AAE9AE2D52850E727881BB646191D9F558C4284DDCD4F969AB5C3EB2674D3815"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14984
Expires: Thu, 23 Mar 2023 07:51:29 GMT
Date: Thu, 23 Mar 2023 03:41:45 GMT
Connection: keep-alive

                                        
                                            GET /b6/6f/f7/b66ff7c1636b152673f970d2464db83f.js HTTP/1.1 
Host: forgivenessimpact.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.243.59.20
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.17.9
Date: Thu, 23 Mar 2023 03:41:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7cbb93db7fecfd6b41f89cf32fd42e29
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (60169), with no line terminators
Size:   20710
Md5:    0a834b890bc89db7138149576449ae8e
Sha1:   4c407219c8b24e8ce0cfb6915922283e8fd7f933
Sha256: 1f4c0b49579d9a72bdde3ee9922de701132a7cd73cf35881448f09195a118035

Blocklists:
  - fortinet: Malware
                                        
                                            GET /g9RbYoQO26rZA3R/55129 HTTP/1.1 
Host: henoticpipi.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; GL_GI10=eJw9i7sOgkAURAENEQXMJH6APyA%2BgoWtWhoojPUG8Wo2wl7Crg%2F8elETq5mcOWNZljMK4cgK%2FmoerWZRvIjmyxidCzGcJIWf802ZuhEqKwluwvUja%2BDWdJGsAgx%2BReR8IvSTdHJQV8UP9R8%2BtwDdXJomgPeJrxv20JG6Qrgu5HO85%2BJmWlvDU2SErohO8DbZsaDpdr9D%2BKffs2ujJ7Woan42bR8aWdKLFQk%2BnzWZFtl313kDsc5BIg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.109.248.164
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx
Date: Thu, 23 Mar 2023 03:41:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.filefactory.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   26
Md5:    4e5d65669f8dcd928dad06adf883f025
Sha1:   d771713d758c3348dd7e5b38bb40c7935399ae46
Sha256: 0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=136067
Date: Thu, 23 Mar 2023 03:41:45 GMT
Etag: "641b2d57-1d7"
Expires: Fri, 24 Mar 2023 17:29:32 GMT
Last-Modified: Wed, 22 Mar 2023 16:31:19 GMT
Server: ECAcc (nya/78BE)
X-Cache: Miss from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tQ_kS7S8mwhSD-NQXHUgvZiiMUaSsB4398jZuRSIj2jLUPvIFg2C2A==
Age: 3493

                                        
                                            GET /stats HTTP/1.1 
Host: simplewebanalysis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.filefactory.com
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             54.93.153.146
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Thu, 23 Mar 2023 03:41:45 GMT
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.filefactory.com
access-control-allow-credentials: true
set-cookie: uid_id2=5617262c-1324-4ee7-be89-fae26dbac507:1:1; expires=Sun, 20 Mar 2033 03:41:45 GMT; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    9888a6263793ee4e1c05b82923abd85e
Sha1:   b76d48e99f138d9ce8140311eba02ff60d4ec241
Sha256: a35979520950343d7ee00109ee5ef310d39469ba7faaea6e64ef454b907aa349
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "5AB5D716539BAE0FBB4A03D6B5D3B24302A6B6A7957C50578BF9E144A823E6D5"
Last-Modified: Wed, 22 Mar 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4310
Expires: Thu, 23 Mar 2023 04:53:36 GMT
Date: Thu, 23 Mar 2023 03:41:46 GMT
Connection: keep-alive

                                        
                                            GET /js/signup-forms/popup/unique-methods/embed.js HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 20 Jan 2023 18:27:57 GMT
x-amz-server-side-encryption: AES256
Server: AmazonS3
Content-Encoding: br
Date: Wed, 22 Mar 2023 16:07:35 GMT
ETag: W/"3281ba63652083b7a938a78b62fe19d4"
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ytWP43FywaJqPXpCgRynVFjz6udryfEPjQg0BFlOW9frIaRW-ta9Tw==
Age: 41652
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text, with very long lines (65526)
Size:   67749
Md5:    e8c290f3be6ccafa02031cc92c4db5b3
Sha1:   b90a54a483d123df13c9629c67428ad296a54701
Sha256: 6dbde32e9f3882f2e901a714d91189cf6ba0be353605de97d529590af4b7c92c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 03:41:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ga.js HTTP/1.1 
Host: ssl.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.8
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Thu, 23 Mar 2023 02:41:41 GMT
expires: Thu, 23 Mar 2023 04:41:41 GMT
cache-control: public, max-age=7200
age: 3605
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1305)
Size:   17168
Md5:    01d5892e6e243b52998310c2925b9f3a
Sha1:   58180151b6a6ee4af73583a214b68efb9e8844d4
Sha256: 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3068
Cache-Control: max-age=127334
Date: Thu, 23 Mar 2023 03:41:46 GMT
Etag: "641b0ce4-1d7"
Expires: Fri, 24 Mar 2023 15:04:00 GMT
Last-Modified: Wed, 22 Mar 2023 14:12:52 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                            
vary: Accept-Encoding
content-encoding: gzip
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: MeDcSG7q+6cWUFMSx8+Ck7cdX87m1YHI4dXwS0AwaD42ffaMX/S0L0BBVABjHqzPk2iAJqHgzeVWQRgdl4KkGw==
content-length: 27907
x-fb-trip-id: 1679558926
date: Thu, 23 Mar 2023 03:41:46 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   27907
Md5:    e5f5bf796d91f271e383cf1ff3ee5af4
Sha1:   70ead02da19095ca752d55e89a48fcdf59d44d33
Sha256: 247f023e282f1556e668df0033858196d682f31f659d1b53ea6dcaeff56c401a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 23 Mar 2023 03:41:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 2994
Cache-Control: max-age=127260
Date: Thu, 23 Mar 2023 03:41:46 GMT
Etag: "641b0ce4-1d7"
Expires: Fri, 24 Mar 2023 15:02:46 GMT
Last-Modified: Wed, 22 Mar 2023 14:12:52 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /pixel/purst?dl=0&th=0&sc=0&rs=1675&rd=1675&fd=1036&bv=22.10.v.9&tmpl=70 HTTP/1.1 
Host: lighthousemissingdisavow.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.243.59.13
HTTP/1.1 200 OK
                                            
Server: nginx/1.17.6
Date: Thu, 23 Mar 2023 03:41:46 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "2D5AD57346F20E59D8011A72E8AE8D73E4EF5526DC390DD674426EBB44C1743A"
Last-Modified: Wed, 22 Mar 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4288
Expires: Thu, 23 Mar 2023 04:53:14 GMT
Date: Thu, 23 Mar 2023 03:41:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8113
Expires: Thu, 23 Mar 2023 05:56:59 GMT
Date: Thu, 23 Mar 2023 03:41:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8113
Expires: Thu, 23 Mar 2023 05:56:59 GMT
Date: Thu, 23 Mar 2023 03:41:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8113
Expires: Thu, 23 Mar 2023 05:56:59 GMT
Date: Thu, 23 Mar 2023 03:41:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8113
Expires: Thu, 23 Mar 2023 05:56:59 GMT
Date: Thu, 23 Mar 2023 03:41:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8113
Expires: Thu, 23 Mar 2023 05:56:59 GMT
Date: Thu, 23 Mar 2023 03:41:46 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9024651c-3847-4a12-9650-405ea99fd1b9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5753
x-amzn-requestid: d2538544-4f4c-4de0-a438-a48642dd0f17
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8pDGqyIAMFwRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b74a0-339c26cd16208aae5c47dc2f;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:35:28 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: VRd1F4m0DnPtGvICp20ib8dhdwJ_jxdVMJEHqA9CmvQB6USSEupsLA==
via: 1.1 4b800f7fa2c3fbb9f4f3c505b0df315e.cloudfront.net (CloudFront), 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:22 GMT
age: 21504
etag: "391c43d349b943ea9af4aa6e3b6910c07370ee78"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5753
Md5:    6f29db357e8536a4aeccdd3df67d3205
Sha1:   391c43d349b943ea9af4aa6e3b6910c07370ee78
Sha256: b0ee1cab104b785c33aca9f3caae8f9c1abd856af3cfe1603b2b7036727468ae
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7a72dbc-373a-4f8e-af8b-0ed08e2803e6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6668
x-amzn-requestid: 18a822d0-3a3c-4225-a297-c5cb93b28663
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3FEBIAMFkrg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-309c2ab7261fd7c635c54555;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: Uvg1q6MVNES5M-RCWbAlkAVSia1QT7XHDJEZp0oSVUoDoe_1GS6kuQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:22 GMT
etag: "2de066240ff8c399fa1eb3b87fe7673294ee207c"
age: 21504
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6668
Md5:    ad549baba5e36a47876bd01552d5d91d
Sha1:   2de066240ff8c399fa1eb3b87fe7673294ee207c
Sha256: fdd10f366b8acf79ea4aac5fa47233e351d923dc21d669fe98b48487870244b4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4912
x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3Fl1IAMFYgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 4xGMCVWy2EXLLN8keteGLQvQjOp6KH97rkn_FK10eyng0-5EudcOig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:33 GMT
etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e"
age: 21493
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4912
Md5:    f4a771935927950222124e14b56046df
Sha1:   d07fe53e4ac41048497b2732c017f6666c3eda9e
Sha256: 4e8388626074646c2336711be0a170ceab367c343648a32d2389dd87640251d0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6692
x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9d9FcOoAMFaFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: PNAVsyfdAHjn5F6Rt1uz1U46QCIGvTCqZatbAurr6Ilu0quHWExuSw==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:34 GMT
age: 21492
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6692
Md5:    c05bfdf1411a931d8ea9adc64b07bc74
Sha1:   156ef59e53564a4f2b27002b2695fafecd578d82
Sha256: 15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffed036ca-a43b-426f-a0f3-fb8f2e221171.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6430
x-amzn-requestid: abbe5dc0-5218-46ef-b264-30aa5d0a87b3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BzanbGRCIAMF96g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64113e2f-3c198b4a31aaa8f263ec8db5;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 03:40:31 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: WxDQn6RNw2UUL4QLlZA13MahPDBJokKWw298G97UFmp_HT5DfYrJ8Q==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 bb763d35677c62f9f5d9728bba884662.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 11:36:44 GMT
age: 57902
etag: "4860b7e75775fe187a9253a4d38222e36552f529"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6430
Md5:    27bd1bd539c3711ff340f243098cab93
Sha1:   4860b7e75775fe187a9253a4d38222e36552f529
Sha256: 34278c150d0686e999228226d0d92e3e7ed1116978ab94fd21b3047c44a69972
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340c6dd8-fc2f-45fc-9318-44a28c249325.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9687
x-amzn-requestid: b7c8cd8c-6103-4aa4-9016-f02cf368908d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8JGHyEoAMFzJw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73d3-2fb1fd1b5be3289047f8aed4;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:32:03 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: LJr_FUB0Pp-5jqhn6kXCUxPYlRZCXlZtzEx8aYqeKhkl8Hhx5Ef9ZQ==
via: 1.1 773bf3616e85ce2b187fa78710a6beb2.cloudfront.net (CloudFront), 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:22 GMT
etag: "d81a4852f956999fa28a5f667ed73506843d0731"
age: 21504
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9687
Md5:    6de676f6856031e5c1baebe9166a8269
Sha1:   d81a4852f956999fa28a5f667ed73506843d0731
Sha256: 71f282ba594e454a2abf1c3700ade4d9461d6d48ac2726f746f3da5a63e29c38
                                        
                                            GET /advertisers.js HTTP/1.1 
Host: banquetunarmedgrater.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.243.61.227
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.19.5
Date: Thu, 23 Mar 2023 03:41:46 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cbaafeb80b2f42bf01c391387881e08f
Strict-Transport-Security: max-age=0; includeSubdomains

                                        
                                            GET /tr/?id=559928301484091&ev=PageView&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F34jrovpljx8s%2F1996%2520-%2520J%2520Dilla%2520-%25201996%2520Batch.7z&rl=&if=false&ts=1679542913561&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.99&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679542913560.1357719734&it=1679542913276&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             157.240.200.35
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 23 Mar 2023 03:41:46 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /tr/?id=559928301484091&ev=ff_member&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F34jrovpljx8s%2F1996%2520-%2520J%2520Dilla%2520-%25201996%2520Batch.7z&rl=&if=false&ts=1679542913563&cd[type]=free&cd[subends]=0&cd[subduration]=0&cd[files]=0&cd[filesdownloaded]=0&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.99&r=stable&ec=1&o=30&fbp=fb.1.1679542913560.1357719734&it=1679542913276&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             157.240.200.35
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 23 Mar 2023 03:41:46 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /subscribe/form-settings?u=cc27616a935143f3234e68708&id=7870230735&u=cc27616a935143f3234e68708&id=7870230735&c=dojo_request_script_callbacks.dojo_request_script0 HTTP/1.1 
Host: mc.us6.list-manage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.110.24.122
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: openresty
content-length: 6179
x-ua-compatible: IE=edge,chrome=1
referrer-policy: same-origin
content-encoding: gzip
cache-control: max-age=300
expires: Thu, 23 Mar 2023 03:46:46 GMT
date: Thu, 23 Mar 2023 03:41:46 GMT
vary: Accept-Encoding
set-cookie: _mcid=1.71917e41a4094b8c9730a1a4ca9c2462.eb258b5decd49c9ba00da4110c098afed63b5d0cadbecc5ffd5de1530fe71497; expires=Fri, 22-Mar-2024 03:41:46 GMT; Max-Age=31536000; path=/ _mc_anon_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ _abck=D772C916520020C4B9CF7CC5F30A2025~-1~YAAQrU0kF738pwiHAQAAtu+ODAkHCKQcVf/tH4qOL16Dt+Aw4oLYNME7u404kxfpqgKRMdQqp6QZlouUYe9s45uOAHvibrfeV1MrYSAQcP9sMhpx+XNQPvCSBOzSNcJzSndBfIiBi+QP/T3ERg1odqUDaeg7xfHS6LtxSUUVRO87MgU41L8L9ZmfezeWNOICTVFDpdfxWPQQChizeesNQlavf6zyjIwdSY0CN9ev4kjbiwi2uphPyeLWesI/lWR5Y3g2O6J2IAYdlVgSYao1sLYSOULY5SHWVJEVYdonS3cJNMuYAQoDjjCGyJA1eB98Pij9m/gE2LTQtDsT9fovGytybTsNZ8OAPtqfzjRedFDKgaVOP3iXrkL2HJKA3Q6C+n8=~-1~-1~-1; Domain=.list-manage.com; Path=/; Expires=Fri, 22 Mar 2024 03:41:46 GMT; Max-Age=31536000; SameSite=None; Secure ak_bmsc=14E89826DCC2555101004DED6751C884~000000000000000000000000000000~YAAQrU0kF778pwiHAQAAtu+ODBMBngH1m6FSqMSw+cPWepcjV2J3XuFWi470nOH5iSABd/RhRAvuwcH0f+ZUnB6e1kR6dI8S9K5dBzsCu2BmIdQdTojQZt9xUXtN63WOKqtVzdrs7ssxKKc950gCn08Hd9jKYg+J1QMa8nijefk3D/v9bZpB9pHuNqgG1A1EM2RhtHrlZ9Q6l7WRRQ7mjhczdSQi14ma67pslGXStJNAPyvkWQ+kWkQa6QKjL/6qzlRmxEkHmJObr+rB3pTWBphwba0dLETX1aKTGBd3Vet/b3Cs2JF6XDa0+TLm5f083GCMYeCqlz/pVfqtC5r/D5frs70MNj1+sVae2d08ygGtA4yr8uPwVojDOudPu/237rNjM6aJ6GqVbTqCXpZcluBw; Domain=.us6.list-manage.com; Path=/; Expires=Thu, 23 Mar 2023 05:41:46 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly bm_sz=234A22867D3A69D0C5830406AD893F30~YAAQrU0kF7/8pwiHAQAAtu+ODBN8MeBrCjWn5gsI9CAFFUK1wjsWs1lTT68UMvwz+WI/RFBV6qFcT7yNpbSKXgW7aMYXjn+Mf+FL04dCR0uR+Db+NpLZLHWPcbesysAo9545X6eWkFzxG48AjWaNZLlDVxjV5bvBDCMKO/8tv2JrpIK6iVjlbYT90vYJDJnl593VxqWaDrebGp61uLcjGq6a+4PMnABDLswFeF97p9XlZaZunIEiiIVPJ/SCHesO5U7FphkdXyD3NDPU7qNVelSFHmpSESNRLfbClLzm0j0Z+hl1ZPKNKA==~3356213~4273456; Domain=.list-manage.com; Path=/; Expires=Thu, 23 Mar 2023 07:41:46 GMT; Max-Age=14400; SameSite=None; Secure
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12781), with no line terminators
Size:   6179
Md5:    b4b632cc92b7497665a00ea7f4e4185d
Sha1:   5784a1a702feff336a9519e93cd53b8694b9b612
Sha256: fec20cc62b53e3a458dadc074f5852889f18827319802df572056ce30bfdaa92
                                        
                                            GET /js/signup-forms/popup/unique-methods/73bf20a8fe762dee6abd0173cd576e53d748a0df/popup.js HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.28
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Mar 2023 14:07:43 GMT
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
ETag: W/"d3149280c831cbf6538770c71a916f43"
Server: AmazonS3
Content-Encoding: gzip
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kv-tixP66mDg3lZA359kRo3cjAfakv2_MZribhsP4BYksBMkSQidNw==
Age: 48845
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text, with very long lines (65526)
Size:   31174
Md5:    4e6dfdab7f53622e51e0fd8e32434426
Sha1:   270f19244a2a3b2552e6d9e4ed74120b344ce979
Sha256: 3612f7d059fb27b1a314bc178b525c15cb51e630ed7d81959e4a69938220189a
                                        
                                            GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/common.css HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.28
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: br
Date: Wed, 22 Mar 2023 19:58:49 GMT
ETag: W/"82e72d627b04e1654282023cca1d1e69"
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ll1rEqYmhvHh_yyOYVRScLngFt_tGub0lzOiO3KP9Nj6q2zLo6Qn3g==
Age: 27779
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text
Size:   2399
Md5:    d19b18b64fe30a64762d4a50ca861b1c
Sha1:   cf0b39c5e4a85fa9cb916f074c62ec2315528c95
Sha256: ddc117511a02d7e507e26304afa0f9877c6644f43ec83ca8a15ff81b00c1e79e
                                        
                                            GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/banner.css HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.28
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: br
Date: Thu, 23 Mar 2023 01:52:23 GMT
ETag: W/"78d1bdd981816cfbeb6954a85f9efa58"
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F7e101wFWxF_r69tU4ZtyusaF9xG7sFR0EV3iJEleCgIAr_PewpSOw==
Age: 6565
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text
Size:   348
Md5:    7dc952a02aac2296639b02e8b693f1ca
Sha1:   141d2c58d397b253795db7e070d0846e4cb67d37
Sha256: 4768822ea5fd24c1368db661e02e9e2119f98351068a5531c3ae6e7a762f5e9a
                                        
                                            GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/layout-2.css HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.28
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: br
Date: Wed, 22 Mar 2023 16:26:17 GMT
ETag: W/"38f50a83c6d5d15facb231447fa1ac56"
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FgxtftY31HJ8jKDzJlU54c6c-31vXofGTR-a65T0uA3AdkqbQmrlsw==
Age: 40531
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text
Size:   379
Md5:    9fd83ab40bc288a35861ff6a7563acea
Sha1:   7e1b25aee243e1ee670eb64683cfaccd88625976
Sha256: c755c118189808bd2a51aaf47595ed2622ad2a27009eb8836128fb4c4ab6a363
                                        
                                            GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/modal.css HTTP/1.1 
Host: downloads.mailchimp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.28
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Mar 2023 16:56:08 GMT
ETag: W/"aa6f4416185bd7f299dd89e11dac117f"
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _z-HzEy3MjETY2jwdVgbOWyb8ows4LRuaPQnVM7JpPLPluGZW0ZsDw==
Age: 47791
Vary: Accept-Encoding, Origin


--- Additional Info ---
Magic:  ASCII text
Size:   945
Md5:    cff4710f863e85980b11cdc1a67e45e5
Sha1:   272b6b68af6d70bd7e1b69b251ac5821cf3daa25
Sha256: 8a3b8e717762c3e251de403a2f6b06da68e2fce957e10474b0a75c1f610799c3
                                        
                                            GET /t246f07e0/img/e3t46_u72krm_281c55c4.jpg HTTP/1.1 
Host: engagecdn.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Cookie: locale=en_US.utf8; __utma=140252452.32372259.1679542913.1679542913.1679542913.1; __utmb=140252452.1.10.1679542913; __utmc=140252452; __utmz=140252452.1679542913.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _fbp=fb.1.1679542913560.1357719734
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             89.149.201.79
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 23 Mar 2023 03:41:47 GMT
content-length: 14043
last-modified: Thu, 30 Apr 2020 18:25:16 GMT
expires: Fri, 22 Mar 2024 03:41:47 GMT
cache-control: max-age=31536000, public, no-transform
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3\012- data
Size:   14043
Md5:    a5334cac2d8801281abfc1334f1f8e91
Sha1:   30c642fd9ec419a048727344e168b136ed557082
Sha256: 65a4214abfedbf1e3c3475b6692fef15dc47bdfa4c34f17ec1d6d042632d4bb5
                                        
                                            GET /t246f07e0/img/e3t46_sw2rau_0965c802.png HTTP/1.1 
Host: engagecdn.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Cookie: locale=en_US.utf8; __utma=140252452.32372259.1679542913.1679542913.1679542913.1; __utmb=140252452.1.10.1679542913; __utmc=140252452; __utmz=140252452.1679542913.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _fbp=fb.1.1679542913560.1357719734
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             89.149.201.79
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 03:41:47 GMT
content-length: 55412
last-modified: Mon, 31 Oct 2022 00:56:19 GMT
expires: Fri, 22 Mar 2024 03:41:47 GMT
cache-control: max-age=31536000, public, no-transform
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 800 x 800, 8-bit colormap, non-interlaced\012- data
Size:   55412
Md5:    40c6eca44ab1446d3566e4bf270a0e76
Sha1:   6c86c50646c0e1040f706060f047cdb9c41a4eda
Sha256: 4581d5527a76e3093bcc369c44345a131aa2aeea7f26f80e34df71cfb5c07b65
                                        
                                            GET /t246f07e0/img/e3t46_huvsmw798b7sbtfd5wyk_bac6f6c2f517602ab8355add92356f9b.png HTTP/1.1 
Host: engagecdn.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Cookie: locale=en_US.utf8; __utma=140252452.32372259.1679542913.1679542913.1679542913.1; __utmb=140252452.1.10.1679542913; __utmc=140252452; __utmz=140252452.1679542913.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; _fbp=fb.1.1679542913560.1357719734
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             89.149.201.79
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 23 Mar 2023 03:41:47 GMT
content-length: 122137
last-modified: Thu, 30 Apr 2020 18:25:15 GMT
expires: Fri, 22 Mar 2024 03:41:47 GMT
cache-control: max-age=31536000, public, no-transform
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 580 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size:   122137
Md5:    bac6f6c2f517602ab8355add92356f9b
Sha1:   c8f5543e6256eea65c9711aeaeee099eca442718
Sha256: 88da400955be51edec77a77a57967be6716a7c223b7dda2064c9f7fa96f068b4
                                        
                                            GET /css?family=Open+Sans:400,600,700,800 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.42
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Mar 2023 03:41:44 GMT
date: Thu, 23 Mar 2023 03:41:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /?938685878&keywords=guest HTTP/1.1 
Host: engagesrvr.filefactory.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.filefactory.com
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site

                                        
                                             213.227.142.34
HTTP/2 200 OK
content-type: application/json
                                            
date: Thu, 23 Mar 2023 03:41:46 GMT
cache-control: no-store, no-cache, no-transform, must-revalidate, proxy-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-store, no-cache
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://www.filefactory.com
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: X-Requested-With, Content-Type, CSRFToken, Authorization
link: <//engagecdn.filefactory.com>; rel=dns-prefetch
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: