Overview

URL88.149.252.19/maestroAditum/CM/Logon?returnUrl=/maestroAditum
IP 88.149.252.19 (Italy)
ASN#35612 EOLO S.p.A.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2023-02-16 17:35:08 UTC
StatusLoading report..
IDS alerts0
Blocklist alert33
urlquery alerts No alerts detected
Tags None

Domain Summary (7)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-13T05:09:10Z 782 2374 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-13T05:09:35Z 413 5844 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-13T05:09:13Z 333 391 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-13T05:09:14Z 606 127 35.80.120.72
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-13T05:09:16Z 3246 52649 34.120.237.76
88.149.252.19 (33) 0 25228 2871441 88.149.252.19
r3.o.lencr.org (9) 344 2020-12-02T09:52:13Z 2023-03-13T05:09:07Z 3042 7976 23.36.77.32

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed
2023-02-16 medium 88.149.252.19 Sinkholed

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 88.149.252.19
Date UQ / IDS / BL URL IP
2023-02-16 17:35:08 UTC 0 - 0 - 33 88.149.252.19/maestroAditum/CM/Logon?returnUr (...) 88.149.252.19


Last 5 reports on ASN: EOLO S.p.A.
Date UQ / IDS / BL URL IP
2023-05-29 02:51:06 UTC 0 - 0 - 2 88.149.129.170/ 88.149.129.170
2023-05-28 02:45:16 UTC 0 - 0 - 2 88.149.129.162/ 88.149.129.162
2023-05-28 02:45:11 UTC 0 - 0 - 2 88.149.129.170/ 88.149.129.170
2023-05-26 04:05:28 UTC 0 - 0 - 2 88.149.129.162/ 88.149.129.162
2023-05-25 05:42:32 UTC 0 - 0 - 2 88.149.129.178/ 88.149.129.178


Last 1 reports on domain: 88.149.252.19
Date UQ / IDS / BL URL IP
2023-02-16 17:35:08 UTC 0 - 0 - 33 88.149.252.19/maestroAditum/CM/Logon?returnUr (...) 88.149.252.19


No other reports with similar screenshot

JavaScript

Executed Scripts (14)

Executed Evals (9)
#1 JavaScript::Eval (size: 11) - SHA256: ff4419739bfe3af5834ea39ca8d5f6aec0c6bb615bac2ed6b0226a428ab5a6c1
Input.Input
#2 JavaScript::Eval (size: 23) - SHA256: f90e983d9b56aaedfe62fbfbf0b6b23b87b217847a54e2711d6ac6d25bb55216
EventsBadge.EventsBadge
#3 JavaScript::Eval (size: 9) - SHA256: c3c2c6f5e3aa961d6663e509e9c2fefffe0e0cf61916d38dbb44fbd30e0ab9da
Grid.Grid
#4 JavaScript::Eval (size: 25) - SHA256: d84751aed16d5e922582fa304c016ab57468a55dde40e72d6577f763be111b10
LogoutButton.LogoutButton
#5 JavaScript::Eval (size: 17) - SHA256: f1b168e5af0b0646782850afee4380b64d10b6a60a174f1252765056efd467fc
EluPopup.EluPopup
#6 JavaScript::Eval (size: 11) - SHA256: 1de8e7c38bfecd0b1639478ea57df09e49dcfd7403562673c0fdde5a6d67612d
Logon.Logon
#7 JavaScript::Eval (size: 27) - SHA256: c4f936f83dcb632b310fb37b371a300123cdb39cd7252837c40e14ae11e65393
InputPassword.InputPassword
#8 JavaScript::Eval (size: 45) - SHA256: 9b140afcca1d38b58f2c6216b1d901679d6ae0e45fbc0887c15c5b0b00bc596f
EluResponsiveComponent.EluResponsiveComponent
#9 JavaScript::Eval (size: 39) - SHA256: 60a5ffddbc267c78eac97db413f2c4b714ccddc598c4ad747aa04fa4c47e9e70
EluPureEventSummary.EluPureEventSummary

Executed Writes (0)


HTTP Transactions (53)


Request Response
                                        
                                            GET /maestroAditum/CM/Logon?returnUrl=/maestroAditum HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             88.149.252.19
HTTP/1.1 302 Found
                                            
Cache-Control: no-cache, no-store
Pragma: no-cache
Location: /maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Server: Kestrel
Set-Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; path=/maestroAditum; samesite=strict; httponly XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonxd6LIo35batNKq-yA3x_yDRmEqjNNNU1mSVXGoCm64jiKxckRf6ooNNhiCTuIS3mxbdaW4sPPkRd6oOWZPRJ25u7ZCC7LElOS8Wt_SaHP5i_OxpIGxjH26eygwCLGclw; path=/; samesite=lax USERTOKEN=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; samesite=lax
X-Frame-Options: SAMEORIGIN, SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:55 GMT
Content-Length: 0


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "726714A5EBDAA8DDA3C669EEDAD6503FFD2A822CFD0BBDF5EB8A1D8AD43AD5BD"
Last-Modified: Wed, 15 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19257
Expires: Thu, 16 Feb 2023 22:55:53 GMT
Date: Thu, 16 Feb 2023 17:34:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "E59F037BBB477951B8D775ACB4D62C243D19D6B0022787348BAE224092690D53"
Last-Modified: Thu, 16 Feb 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8837
Expires: Thu, 16 Feb 2023 20:02:13 GMT
Date: Thu, 16 Feb 2023 17:34:56 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 16 Feb 2023 16:37:34 GMT
age: 3442
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    ff250d3ef3fa45322bf05039a0122a9f
Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d
Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "48B80951DE12295FA262ACA8AA9B26E24725EA47D205F60737F37643CE43AA1A"
Last-Modified: Thu, 16 Feb 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19974
Expires: Thu, 16 Feb 2023 23:07:50 GMT
Date: Thu, 16 Feb 2023 17:34:56 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: L18L2dBMi32P7g/m859W69WbzCifgTQGDDGtdpz420y92nF5Hj6H6v94aTAOg0jUJzf9IjHdWVk=
x-amz-request-id: CETQHAN45NQ2KKV3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 16 Feb 2023 16:49:26 GMT
age: 2731
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e76071a28ee566dababb3834f46d68ed
Sha1:   aebb4e68c1ba2de0f90025283e8ed8470944fde0
Sha256: 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 16 Feb 2023 17:34:56 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonxd6LIo35batNKq-yA3x_yDRmEqjNNNU1mSVXGoCm64jiKxckRf6ooNNhiCTuIS3mxbdaW4sPPkRd6oOWZPRJ25u7ZCC7LElOS8Wt_SaHP5i_OxpIGxjH26eygwCLGclw
Upgrade-Insecure-Requests: 1

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Cache-Control: no-cache, no-store
Pragma: no-cache
Transfer-Encoding: chunked
Server: Kestrel
Set-Cookie: XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU; path=/; samesite=lax .AspNetCore.Mvc.CookieTempDataProvider=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/maestroAditum; samesite=lax
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:55 GMT


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size:   18383
Md5:    b60d12885259a8ae3a2dd1a56929bfb8
Sha1:   8d1aa7462d46592b114e1d70eaa60849ff77af52
Sha256: b7a5beacf101d60e8bd8db0b714daf0330c071c10d77b0a9ce352e1a48f35910

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Style/dashboard-flexible.css?v=6,0711088916E+17 HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Content-Length: 18144
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abdfeee0"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:55 GMT


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   18144
Md5:    17bcb82564e05670ee2a6e3472981776
Sha1:   1be9f497d50bf9127184fd3c772c34a0e51a1eac
Sha256: 48d03d3938ed61bb9d1f654bddf1b4565f4751bf46cbfd5de4d4227dc799707a

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Scripts/DNA/EluDNA.css?v=6,0711088916E+17 HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Content-Length: 3113
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abdfa429"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:55 GMT


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   3113
Md5:    bd16cc2d0c92596a17368546e4233466
Sha1:   46fd1764a4e290a6fe67b361587bb8d032df975f
Sha256: da7bc6f8476bd2cbf5764efb17978b3784df489f478f17153208cb32381020ad

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Scripts/DNA/DNA.css?v=6,0711088916E+17 HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Content-Length: 10977
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abdf82e1"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:55 GMT


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   10977
Md5:    db003f2ce5c9357cb88b17913b49bb1d
Sha1:   ab0deff39c744dfe4f22371dccda540636168c5f
Sha256: ef76f8d70d0103ee01995b9a7aa510f39c7e62fcb4153271f274bd4cb9c72acd

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Style/default.css?v=6,0711088916E+17 HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Content-Length: 1545
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abdfae09"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:55 GMT


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1545
Md5:    1aa6e55a66287f874b1219dc1bf3e23f
Sha1:   546c898fc37830600c4b2dd2f59d31bf3dec3ab9
Sha256: e1b84aa0f74e908ad040a57ce84a2bd81e89c707261be75fa6bfd6485af7f666

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Localization/Dashboards/Logon.en-US.js HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Content-Length: 6751
Last-Modified: Thu, 01 Jul 2021 10:48:52 GMT
Accept-Ranges: bytes
ETag: "1d76e66ae42185f"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:55 GMT


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (6750), with no line terminators
Size:   6751
Md5:    88e756ae461ef701693a684c2ab81f1f
Sha1:   79d681f4308584cd26afc9498bc7fe4f55ef4999
Sha256: a20690440201093879d4d8cc61f491eb6360bbee65da4baa33b551b9c8235bb7

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Fonts/cmfont/cmfont.css?v=6,0711088916E+17 HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Content-Length: 2975
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abdfa39f"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:55 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   2975
Md5:    e6dd09fc79f8573d145da06c1413e0f5
Sha1:   02b792959f28d370942ec8c26f03250d60a281d4
Sha256: 26218d7baafb60d6d14e79169ba0690beea18dab18f0a081e589703edd806b49

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Scripts/external/require.js?v=6,0711088916E+17 HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Content-Length: 86482
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abdef9d2"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:55 GMT


--- Additional Info ---
Magic:  ASCII text
Size:   86482
Md5:    eb0ef9ae5ed627559fa95dce2937ac06
Sha1:   b1010092f15879164973aaba0cc26c7298118d76
Sha256: a5fa09c0712a5ec008c8bae7481ea66829cc9c513a24c437b19b4552b9ccf7d9

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Content-Length, Content-Type, Cache-Control, Pragma, Retry-After, ETag, Expires, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 16 Feb 2023 17:14:54 GMT
age: 1203
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /maestroAditum/Scripts/dashboards.min.js?v=6,0711088916E+17 HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Content-Length: 661208
Last-Modified: Thu, 01 Jul 2021 10:48:46 GMT
Accept-Ranges: bytes
ETag: "1d76e66aaa46dd8"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:55 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (65403)
Size:   661208
Md5:    8bcd2c23f7823fc35b9118650af6f4e6
Sha1:   8edf8dbfa530a7b87501499c0246af8182787597
Sha256: 69a4add7c5338ff12a9ddf88e50ee101035249a22705229a1756567c991dbb1b

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "9E2C3A542626C68D479648479E09F9570564D4E1F954F63B6CE97AE939729A3D"
Last-Modified: Wed, 15 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3586
Expires: Thu, 16 Feb 2023 18:34:43 GMT
Date: Thu, 16 Feb 2023 17:34:57 GMT
Connection: keep-alive

                                        
                                            GET /maestroAditum/fav/favicon-16x16.png?v=6,0711088916E+17 HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Content-Length: 868
Last-Modified: Wed, 06 Dec 2017 11:05:10 GMT
Accept-Ranges: bytes
ETag: "1d36e8214f0b464"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:56 GMT


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size:   868
Md5:    4b06604998dc32fea18627b4b757bbb7
Sha1:   63462047632b2967db7fde04f3123417ef3388af
Sha256: cbe6c3ca692ecc693fdd1eea2dd261ab2b19b1dd1405eb497c996139684f52dd

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/fav/apple-touch-icon.png?v=6,0711088916E+17 HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Content-Length: 2481
Last-Modified: Wed, 06 Dec 2017 11:05:12 GMT
Accept-Ranges: bytes
ETag: "1d36e821621edb1"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:56 GMT


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Size:   2481
Md5:    c94ea1c71ec5fb6445376189515e3185
Sha1:   9ed7aeafe94e51ad7743064eee7e17ef33d05158
Sha256: 218311427ad6fc107fa33984184e50a3dbf8f813f27ad28044e5bb98670be562

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: zdT/dG5XTuG6Nri68r/VQA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             35.80.120.72
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: yLHyYOCmVuiH1RMO27UPKN+PeAU=

                                        
                                            GET /maestroAditum/Scripts/external/babel-polyfill.min.js?bust=6,0711088916E& HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Content-Length: 97798
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abded606"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:56 GMT


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (32008), with LF, NEL line terminators
Size:   97798
Md5:    6fef55c62df380d41c8f42f8b0c1f4da
Sha1:   2ca6d7d6f7ff0bb11cd58fe2982534630e896a27
Sha256: da7bbca9d163f4033d5d177be44029dd744610a891a6b58be213cc858923d79d

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Fonts/Roboto/Roboto-Regular.ttf HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Style/dashboard-flexible.css?v=6,0711088916E+17
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                            
Content-Length: 162876
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abddd43c"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:56 GMT


--- Additional Info ---
Magic:  TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.001101; 2014Roboto-Regular\012- data
Size:   162876
Md5:    ac3f799d5bbaf5196fab15ab8de8431c
Sha1:   cb0cb91a31f43293bd7042ddab945ce161c29d3d
Sha256: f0e5a21bf5c95e4c1bce2be98a3656ebcc6d42a21f41c4e3ebf69dd815702e54

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Scripts/external/react.production.min.js?bust=6,0711088916E& HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Content-Length: 12681
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abdf9989"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:56 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (543)
Size:   12681
Md5:    3a3bcb6b000c490e78ada7a33b5ada26
Sha1:   605c558425d1a144f6728be422613eb15ca25a75
Sha256: b0bfe581e0f44b8b3f1ed91fbef385a452f593d3e9b293fc752cbdb2ade0fa57

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Scripts/external/react-dom.production.min.js?bust=6,0711088916E& HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Content-Length: 108001
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abde0de1"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:56 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (654)
Size:   108001
Md5:    e4a83fa02c1429d7abb922dfe306190b
Sha1:   02cf8e599fbd4b63a71e0df7349b446c4b88cb19
Sha256: 8e7b155bae763446af389a683ab6084ffe7e8d434c750d1d124001337ec7781e

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Scripts/external/flow-runtime-es5.production.min.js?bust=6,0711088916E& HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Content-Length: 232381
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abdc23bd"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:56 GMT


--- Additional Info ---
Magic:  Algol 68 source text\012- Pascal source, ASCII text, with very long lines (11419)
Size:   232381
Md5:    5de0cfc1c9cfff96e9628d7415aebf04
Sha1:   71d32db984a69844d0aeb3406e73662505988535
Sha256: 32e27254921ee461e0edd9978691cfc52649b2d3c0c70929062b0bbe34d9d739

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Cache/Logon.js?bust=6,0711088916E& HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Content-Length: 829350
Last-Modified: Thu, 01 Jul 2021 10:48:50 GMT
Accept-Ranges: bytes
ETag: "1d76e66ad1c72a6"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:56 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (65439), with CRLF, LF line terminators
Size:   829350
Md5:    189eb6c0dec0ee6390e87a8f889ff5a1
Sha1:   4f9f92cbac90f13799b28c0ff8b516d4a6a2b837
Sha256: 75d31ace3a60b04d2e0b1e0c10978e77ab2a20f49cf4a57001ce5ccbf59940bf

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/NodeModules/react-addons-shallow-compare.js?bust=6,0711088916E& HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: public,max-age=31536000
Content-Length: 3311
Expires: Fri, 16 Feb 2024 17:34:57 GMT
Last-Modified: Thu, 01 Jul 2021 10:48:50 GMT
Accept-Ranges: bytes
ETag: "1d76e66ad10d9ef"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (882)
Size:   3311
Md5:    575dc5a924d3aa7f67b5a2e73ad74a95
Sha1:   f7cfc9cdd26d09a45481841de477a8dfa03bf0c4
Sha256: d5f0d0f06fbc772aa0c2c411d37d2022e1dd1cc32d6e9ff8a8c8b6522e013654

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/NodeModules/memoize-one.js?bust=6,0711088916E& HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: public,max-age=31536000
Content-Length: 1896
Expires: Fri, 16 Feb 2024 17:34:57 GMT
Last-Modified: Thu, 01 Jul 2021 10:48:50 GMT
Accept-Ranges: bytes
ETag: "1d76e66ad10d268"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (879)
Size:   1896
Md5:    91b3f8c22bddb7943caa8c94d31a2045
Sha1:   bdd4aaf71197ec4c657586a790aec8fa52546154
Sha256: d27452390ad5c7548adc60ce421b83185d18266150c72ddbfe93c3df449cabda

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Styles/Logon.css?v=$609970767740000000 HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Cache-Control: public,max-age=31536000
Content-Length: 54179
Expires: Fri, 16 Feb 2024 17:34:57 GMT
Last-Modified: Thu, 01 Jul 2021 10:48:52 GMT
Accept-Ranges: bytes
ETag: "1d76e66ae42d1a3"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1901), with CRLF, LF line terminators
Size:   54179
Md5:    26e36e47d41b4a626e72a498ecd35282
Sha1:   074e29e279766e886a9774664fcd5e945f2a2629
Sha256: f40617d5237eea02111acf9b93ece32c05a23281e53597bb7582e510a2d27e03

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /maestroAditum/Security/GetPublicKey HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json;charset=utf-8
X-Requested-With: XMLHttpRequest
X-XSRF-TOKEN: CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU
Content-Length: 2
Origin: http://88.149.252.19
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                            
Cache-Control: no-cache, no-store
Pragma: no-cache
Transfer-Encoding: chunked
Server: Kestrel
Set-Cookie: XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonnehBuKjAW6eDlEHkCdZ0M3aIwIbVhx1Ime1mSdI8au7qsArtbNpZz_5gNz0IXpDERrZwMIswn0FI0D_uUkz5gpg_1qB0D9J0NsA_JTfaXBDifjUzIQcKhgwunmzCsulU; path=/; samesite=lax
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (384), with no line terminators
Size:   384
Md5:    dd8ff6e7db6cab3955fa751f64813208
Sha1:   b664e46f3e32bab60dfdc0b1eac6f7a3018909ec
Sha256: 3f816d1013681eedba4f21e82641978cbb714f4c712851e5116277216cb5bf94

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Resources/48/man.svg HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Content-Length: 2340
Last-Modified: Thu, 01 Jul 2021 10:48:46 GMT
Accept-Ranges: bytes
ETag: "1d76e66aaae7224"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1286)
Size:   2340
Md5:    02c3c7b7e4b8c89ccc18451ce99d9ebd
Sha1:   9118d5534804a3ba60c420211a202c43ca5f6e0c
Sha256: 2e4d28b1d4ce6cab58e9f32ec9b96cb3f570d0160bff9f3d7b46576e12482956

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Resources/48/logout.svg HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Content-Length: 830
Last-Modified: Thu, 01 Jul 2021 10:48:46 GMT
Accept-Ranges: bytes
ETag: "1d76e66aaae783e"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   830
Md5:    710a2435f29cdffe46da3d2b1e011be0
Sha1:   0966097760adc5a4550b8c2282f753f6fe7d8ae9
Sha256: 5147f80ebf439fd1f57fc4d91a70391d991fc5fa1d6c2b3e7cd3e79b83586d09

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Resources/48/padlock.svg HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Content-Length: 1478
Last-Modified: Thu, 01 Jul 2021 10:48:46 GMT
Accept-Ranges: bytes
ETag: "1d76e66aaae7ec6"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (489)
Size:   1478
Md5:    e8bb7003448b94b37297e6eb7ab2f6d7
Sha1:   cf2de812e184e11a1c10d200ac33fa16687766ea
Sha256: d3c40402feaf0965636419fd429388ae06442a84bab3553ea2604679e1dceefc

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Resources/common/ok.svg HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Content-Length: 571
Last-Modified: Thu, 01 Jul 2021 10:48:46 GMT
Accept-Ranges: bytes
ETag: "1d76e66aaae793b"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   571
Md5:    7e8dce1ef1ad2c3530205766164dca89
Sha1:   2d9240c00fa0309f10e5d79716e792f0bf0e4f43
Sha256: 1d6f89b0218512fcdba14262b3cad28642efaadf9df561ddc1aa64263ab22c04

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Fonts/Roboto/Roboto-Bold.ttf HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Style/dashboard-flexible.css?v=6,0711088916E+17
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                            
Content-Length: 162464
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abddd2a0"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.001150; 2014Roboto\012- data
Size:   162464
Md5:    d329cc8b34667f114a95422aaad1b063
Sha1:   0a1793926e2ee724cf2ff3fc7adc745348659f82
Sha256: ef2ab0e402d5cb9de893e263a2c44e57f57fec3974b0d981bfe84dec3dae83a1

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6BC07733856E4FBEFBB42E5AD6423539CCBC855C66CF4279BF515997EA8933D2"
Last-Modified: Tue, 14 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9779
Expires: Thu, 16 Feb 2023 20:17:58 GMT
Date: Thu, 16 Feb 2023 17:34:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6BC07733856E4FBEFBB42E5AD6423539CCBC855C66CF4279BF515997EA8933D2"
Last-Modified: Tue, 14 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9779
Expires: Thu, 16 Feb 2023 20:17:58 GMT
Date: Thu, 16 Feb 2023 17:34:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6BC07733856E4FBEFBB42E5AD6423539CCBC855C66CF4279BF515997EA8933D2"
Last-Modified: Tue, 14 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9779
Expires: Thu, 16 Feb 2023 20:17:58 GMT
Date: Thu, 16 Feb 2023 17:34:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6BC07733856E4FBEFBB42E5AD6423539CCBC855C66CF4279BF515997EA8933D2"
Last-Modified: Tue, 14 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9779
Expires: Thu, 16 Feb 2023 20:17:58 GMT
Date: Thu, 16 Feb 2023 17:34:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "6BC07733856E4FBEFBB42E5AD6423539CCBC855C66CF4279BF515997EA8933D2"
Last-Modified: Tue, 14 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9779
Expires: Thu, 16 Feb 2023 20:17:58 GMT
Date: Thu, 16 Feb 2023 17:34:59 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33b1c914-808f-4087-bb21-b717b26f3496.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5697
x-amzn-requestid: 72be2345-9c59-4845-95eb-25df25ec9717
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AZlzzHc8IAMFRMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ed5018-3ce084a057dfb9a8400c743b;Sampled=0
x-amzn-remapped-date: Wed, 15 Feb 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XE6c9P_jyohdKOZ_iwMTKI1V1Si2UQ8qznV7u4PfAbzjyq7qMxj-gA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Feb 2023 21:59:59 GMT
age: 70500
etag: "e38c5908a977b024db07283a627c865988a1ed19"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5697
Md5:    a4e84c4a1c0ed65e3bf372657fd7e496
Sha1:   e38c5908a977b024db07283a627c865988a1ed19
Sha256: 0fcfe03ec49c359f171162e3fca564bb105e50f191ed73fc79d54a71ca560410
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ddf2390-9365-4e6b-8c2d-8914c8048fda.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 3071
x-amzn-requestid: d3c02d0c-ff5a-4ca6-b0e4-50a1129cc9a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AZmigE9GoAMFbWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ed5142-63cff1f52b2a4b8c20304d8e;Sampled=0
x-amzn-remapped-date: Wed, 15 Feb 2023 21:40:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: __KOt0rf7gh0A5ywLKhYXBmH6ckypZ0CLz5bwDmikCvxNjTh6jMO0A==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Feb 2023 11:51:48 GMT
age: 20591
etag: "93c97ef46a569ea13ba8de5a51aaac968582b125"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3071
Md5:    6a41a3409f2c1cbd1c33b79b28499fc1
Sha1:   93c97ef46a569ea13ba8de5a51aaac968582b125
Sha256: e7c051fe735cecb13b27fa915d02cee185a78bd7bd6be20a5b60a839dae675a3
                                        
                                            GET /maestroAditum/Scripts/EluHeartBeat.js HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonnehBuKjAW6eDlEHkCdZ0M3aIwIbVhx1Ime1mSdI8au7qsArtbNpZz_5gNz0IXpDERrZwMIswn0FI0D_uUkz5gpg_1qB0D9J0NsA_JTfaXBDifjUzIQcKhgwunmzCsulU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Content-Length: 3998
Last-Modified: Thu, 01 Jul 2021 10:48:46 GMT
Accept-Ranges: bytes
ETag: "1d76e66aaae749e"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   3998
Md5:    c81c09ae1193656bd8de2b224809e3f8
Sha1:   b08de679c56044f73e2e46c890447f14d08418ab
Sha256: b478e65d256a08543770d530ca7528e8304181b27e490cae2f0e75c0b9406f44

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F088042eb-8368-43cc-87ea-092286978e94.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10755
x-amzn-requestid: 2f618b25-3ded-41b9-bccc-342418ee044f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AZmNwFUjIAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ed50be-44bde92d5eb1132233a6b160;Sampled=0
x-amzn-remapped-date: Wed, 15 Feb 2023 21:38:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bmiv1bevUuK-iqhxFkFwOWWFkG281vjBZG2tY8_9_NINkaLZW7Pl4g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Feb 2023 21:55:01 GMT
age: 70798
etag: "7e4585aeab4a996e3fbfd37968bb02931da854a9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10755
Md5:    ebf2b034739bd071054ebf80a1ff595d
Sha1:   7e4585aeab4a996e3fbfd37968bb02931da854a9
Sha256: d6a6c170482ba37606716f8ef9c6edcbc8b77f3105459b1c5d65687ac1371c16
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F231f4f33-ceca-4a48-817a-3eaabd540fd5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8026
x-amzn-requestid: e2b4f266-484d-4e7a-bcf9-343cf9d35c06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ANLUiFc1oAMFVAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e858e9-39d5257e0447fe66622f2387;Sampled=0
x-amzn-remapped-date: Sun, 12 Feb 2023 03:11:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J3CO3CYxmSVDDz-UR71VL4VBQOucquive-Ss9A198TZNP2MQywTNrA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Feb 2023 16:48:16 GMT
age: 2803
etag: "39dfeafd9fad2a99285d0cdf57eee7d315261cef"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8026
Md5:    d36e15febd05762c8857bbe3da466e14
Sha1:   39dfeafd9fad2a99285d0cdf57eee7d315261cef
Sha256: 4d7c06ac1072162fc88b4a79be018af34eb4a558c8e29ccc11374f2367233245
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03d8b9db-4d74-4d37-9579-bc1defd9c23d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4253
x-amzn-requestid: c62459f6-3b6a-4ef8-a1db-79857cd60196
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AZlzeGo9IAMFtoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ed5015-0be365d62e47063b1341b454;Sampled=0
x-amzn-remapped-date: Wed, 15 Feb 2023 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: cUKqMz9rzrodOzMj2-uTW-k_G3_6zIheZjofTH1ZguFHGC38iu6Uag==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Feb 2023 21:39:03 GMT
etag: "64e73779243684555e7835698e53a50352071ad6"
age: 71756
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4253
Md5:    f605d750b4f6c765d827527cc6846627
Sha1:   64e73779243684555e7835698e53a50352071ad6
Sha256: 707d1050736f19c06a88abac85c5a4e17dc12ba09618a5bbc67bbd416a6d2b25
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9fe38f96-4b04-43d2-9644-5b2f7cd0c0c9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 14477
x-amzn-requestid: 2544b5cc-3fb0-4536-88ec-8cb9044fb612
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ANtsXFBYoAMF6tA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e88fe8-452901f67af9f5d95ccc61c3;Sampled=0
x-amzn-remapped-date: Sun, 12 Feb 2023 07:06:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 18cnMMCsvwUvJVsvM8s2v0k3P6WL1kzo4S9dOvsskdYEBk748cj3Cw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Feb 2023 11:50:51 GMT
age: 20648
etag: "c302824325b8f0839c7de54af9c5bd02541e4269"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14477
Md5:    504b69ec2b6350345c36777959b0765a
Sha1:   c302824325b8f0839c7de54af9c5bd02541e4269
Sha256: 6e3a5b1cd7d17a9f448b8189d5683567269b3b3d461838770482283898008f39
                                        
                                            POST /maestroAditum/CM/HeartBeat?mustCheckUserIsConnected=false HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json;charset=utf-8
X-Requested-With: XMLHttpRequest
Content-Length: 2
Origin: http://88.149.252.19
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Scripts/EluHeartBeat.js
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonnehBuKjAW6eDlEHkCdZ0M3aIwIbVhx1Ime1mSdI8au7qsArtbNpZz_5gNz0IXpDERrZwMIswn0FI0D_uUkz5gpg_1qB0D9J0NsA_JTfaXBDifjUzIQcKhgwunmzCsulU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                            
Cache-Control: no-cache, no-store
Pragma: no-cache
Transfer-Encoding: chunked
Server: Kestrel
Set-Cookie: XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXomn-EoBy4cVlaxizhGsvs51xI_P4T1sRrnJRdoFafcOMFNFR8HpAeXW9PYc34FBcGLxEcyCinv2VRnjhuvWjwxkFjt4ezw_zPJ80pGUyAlIh5zgcHrOzNHkfo1u4K1ydpA; path=/; samesite=lax
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   88
Md5:    50607fd88ee65341c9a6778b2bb036b1
Sha1:   86cbca815cb6c5d9b152f31d1cc34fad87a899ba
Sha256: 44cf61eb4413cf6a17cbdc3b0c60c7cce06fe17839a5f14916aafa480620a440

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Fonts/Roboto/Roboto-Light.ttf HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Style/dashboard-flexible.css?v=6,0711088916E+17
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                            
Content-Length: 162420
Last-Modified: Thu, 01 Jul 2021 10:48:48 GMT
Accept-Ranges: bytes
ETag: "1d76e66abddd274"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  TrueType Font data, 17 tables, 1st "GPOS", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto LightRegularVersion 2.001151; 2014Roboto-L\012- data
Size:   162420
Md5:    7b5fb88f12bec8143f00e21bc3222124
Sha1:   2e3148d213b15328ebebba14e828fb3bf79634ee
Sha256: e7ea653ddec2d2a74d0dcbff099c009cc7469ec323a50c89a2915ce44ca4c0b4

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Resources/common/cancel.svg HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                            
Content-Length: 859
Last-Modified: Thu, 01 Jul 2021 10:48:46 GMT
Accept-Ranges: bytes
ETag: "1d76e66aaae785b"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   859
Md5:    eda02f378b5f9d28c7c1066fa2e3388a
Sha1:   21a7b96adb5b44522084993752a30859b111c56f
Sha256: 3a07431d6a3ced8e2512ccc4301da8b277b0c8d949a8ce25ff0321057c22551c

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /maestroAditum/Fonts/Play/Play-Bold.ttf HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Dashboard/Logon?returnUrl=%2FmaestroAditum
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXonZak8MWgQFlgc3mGMmRhQet2dO0dH1qonMYr_gCZfbiaxQGO9_bPrPJpPk7ZUlOlEHu1AjVP1gGMTOJLwVRA_aakrSE1B-T1ntDersiWThcYVOG73LiJAca_3Q42pbKMU

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                            
Content-Length: 210704
Last-Modified: Thu, 01 Jul 2021 10:48:46 GMT
Accept-Ranges: bytes
ETag: "1d76e66aaad4c10"
Server: Kestrel
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:34:57 GMT


--- Additional Info ---
Magic:  TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 26 names, Macintosh, Copyright (c) 2011, Jonas Hecksher, Playtypes, e-types AS (lasse@e-types.com), with Reserved Fon\012- data
Size:   210704
Md5:    f0dbb3f25a7752b46879574ab656c2c6
Sha1:   dc4879722c0e95850714dfdc452bbe0e4775e7db
Sha256: 45c572eccda4cf335165b750345258e753035bf48ee2fdf37faa07c7db88bce0

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /maestroAditum/CM/HeartBeat?mustCheckUserIsConnected=false HTTP/1.1 
Host: 88.149.252.19
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json;charset=utf-8
X-Requested-With: XMLHttpRequest
Content-Length: 2
Origin: http://88.149.252.19
Connection: keep-alive
Referer: http://88.149.252.19/maestroAditum/Scripts/EluHeartBeat.js
Cookie: .AspNetCore.Antiforgery.WNI3nrouytk=CfDJ8GKW2lW_LuNEkR44H__XXolFo2kzR8j-o2MQBKUydu1ZRJ7CU7V5scFVgeK0qMwSNMJn0vDZffXJrP-0rOohyX6jEbPvhk2fxgsoCRSZXiRA4t561MdiC-KS9KKplhoiwEUikTmEXexPTVhUQXfaVis; XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXomn-EoBy4cVlaxizhGsvs51xI_P4T1sRrnJRdoFafcOMFNFR8HpAeXW9PYc34FBcGLxEcyCinv2VRnjhuvWjwxkFjt4ezw_zPJ80pGUyAlIh5zgcHrOzNHkfo1u4K1ydpA

                                        
                                             88.149.252.19
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                            
Cache-Control: no-cache, no-store
Pragma: no-cache
Transfer-Encoding: chunked
Server: Kestrel
Set-Cookie: XSRF-TOKEN=CfDJ8GKW2lW_LuNEkR44H__XXondJ86EViXx4xqytNzRD1L2fN7LHTllL39eZXsAvahrzz1X9XPn6-FnqWgLWwPLSBdCSjYdDp6EavDotJuC2hIaxB4mn91tZYzN7yUw6DtMizkZrOzcXaCkPv6pvfbM8f8; path=/; samesite=lax
X-FRAME-OPTIONS: SAME-ORIGIN
Date: Thu, 16 Feb 2023 17:35:02 GMT


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   88
Md5:    50607fd88ee65341c9a6778b2bb036b1
Sha1:   86cbca815cb6c5d9b152f31d1cc34fad87a899ba
Sha256: 44cf61eb4413cf6a17cbdc3b0c60c7cce06fe17839a5f14916aafa480620a440

Blocklists:
  - quad9: Sinkholed