firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 30 Aug 2022 21:19:21 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0Ni7sCmwnvbcXyGgwzAQ3Kv6IbLRGIAMTYt3qTnNf73-n3k2HsylFA==
Age: 1693
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 517693963cc46e7a35a054296d0edfd5
11dfcd7e118e5f8d31e664e56ac29c57f973b8b3
ece269e8b9be8a5839d75c1343823d68b96930c593c2e3e8d522999176ee3149
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ECE269E8B9BE8A5839D75C1343823D68B96930C593C2E3E8D522999176EE3149"
Last-Modified: Mon, 29 Aug 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3180
Expires: Tue, 30 Aug 2022 22:40:34 GMT
Date: Tue, 30 Aug 2022 21:47:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 29 Aug 2022 22:35:59 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mhEtwbLz08blLZe1u_Zl8DOtHKxDmSa3mKo2cZC8-6T9cmcOAN9F3w==
age: 83496
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 0b25abf0bf4adab3a203d978d5bf9591
8ae874952c08f6f8f9bc946e5326e6ccf37a341e
c4e96ed2c3a434cc95c7bf1d7cc9c5805e2fc61c7a678e69e77d6da82f6f2ee4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 30 Aug 2022 02:33:50 GMT
Expires: Tue, 06 Sep 2022 02:33:49 GMT
Etag: "8ae874952c08f6f8f9bc946e5326e6ccf37a341e"
Cache-Control: max-age=534974,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7430b9c2a9571bfe-OSL
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 30 Aug 2022 21:47:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
evenium-site.com/site/akquise-event-koln;jsessionid=6U3!78w2yE2fFu!Th4cpZy3q.gl2
302 Moved Temporarily 20 B URL HTTP/1.1 evenium-site.com/site/akquise-event-koln;jsessionid=6U3!78w2yE2fFu!Th4cpZy3q.gl2
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert quad9 Sinkholed
GET /site/akquise-event-koln;jsessionid=6U3!78w2yE2fFu!Th4cpZy3q.gl2 HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Moved Temporarily
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Expires: -1
Pragma: no-cache
Cache-Control: no-cache
Location: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Vary: User-Agent,Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/html;charset=UTF-8
evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
200 OK 3.0 kB URL HTTP/1.1 evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash c7384aa5da9f977d64f8e71d70877215
653dad31458078e8af2721b9838139ca13820a83
9e0341831bd81f27fb47df5e12b246603b5c820a042748c25e7ac088d8a02155
Analyzer Verdict Alert quad9 Sinkholed
GET /site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2 HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Pragma: no-cache
Cache-Control: no-cache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html;charset=UTF-8
evenium-site.com/pro/javascript/evenium_basics.js
200 OK 8.4 kB URL HTTP/1.1 evenium-site.com/pro/javascript/evenium_basics.js
IP
Hash 8e4049022c95d124411381a07ac6b3d2
ce2f18903088559fc46aa0a3847ae67046e9adea
7c3495fe589892091786154ee1919a01a7fe964463c33bc24da0a28f6eb2e1c4
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/evenium_basics.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 8412
Keep-Alive: timeout=15, max=198
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/i18n/js_bundle.js
200 OK 936 B URL HTTP/1.1 evenium-site.com/pro/javascript/i18n/js_bundle.js
IP
Hash 028c3db6c4b9951485f26c1895ce6cf6
d655b72daebb6ea6bd2b3e3bfb84267f13c69dcc
dc596aecd30e926923c1cbcb873f1dd7cf9f9c1422d4749d1381a58a2da3b682
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/i18n/js_bundle.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:54 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 936
Keep-Alive: timeout=15, max=197
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/check_functions.js
200 OK 5.1 kB URL HTTP/1.1 evenium-site.com/pro/javascript/check_functions.js
IP
Hash a4da4ddbd364ea34779a038c405a02b7
b93b894d971f0788f276edc1b125393d9c76db14
0a154dc95b9d19f8ba932ce1cc4e00b5012cd8a7ac04bd97a4c0a8a7ad946dcd
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/check_functions.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 5129
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/ng/js/amdLoader/require.2.0.6.js
200 OK 6.0 kB URL HTTP/1.1 evenium-site.com/ng/js/amdLoader/require.2.0.6.js
IP
File type ASCII text, with very long lines (534)
Hash 36fde233166aeaacdb10ebcad3dd8b1c
22962c41b49cf4fd898fd02dbcb10c6203d08eac
ce5d9f955d0566722bcd07022ded1c9d7b14f98af8dbd997e03a20e5374ad319
Analyzer Verdict Alert quad9 Sinkholed
GET /ng/js/amdLoader/require.2.0.6.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 16 Aug 2022 17:07:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 5965
Keep-Alive: timeout=15, max=196
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/i18n/js_bundle_de.js
200 OK 1.0 kB URL HTTP/1.1 evenium-site.com/pro/javascript/i18n/js_bundle_de.js
IP
File type Unicode text, UTF-8 (with BOM) text
Hash dc7e85a07fc1121cca6562626770e852
f3a8d723df5f9e4f4b72df22cdc73ff80b966aec
2e1debf48200da10c6361668ce0c16172dae53b178d17b43d61a2ed3cb5f3f49
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/i18n/js_bundle_de.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:54 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 1033
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/survey_factory.js
200 OK 8.5 kB URL HTTP/1.1 evenium-site.com/pro/javascript/survey_factory.js
IP
Hash 4197665d83361f1f952255985015f1f5
40dfd949ec36a75b639049862da1bed3124877d7
2645134d35718e6363ac5d2ab2f2d0f532e62e4e00c3222edd7b091874d5b973
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/survey_factory.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 8475
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/ng/js/modules/require-config.js
200 OK 1.2 kB URL HTTP/1.1 evenium-site.com/ng/js/modules/require-config.js
IP
Hash c8c5df07ca9333676f12f78c72fc05f4
9b5616f452b957bebca59bdecfffeae15c610c80
1ef626162b97bb8a6ecf09b8db3d927a16c076c6764589d2244b11bc5d352c46
Analyzer Verdict Alert quad9 Sinkholed
GET /ng/js/modules/require-config.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 16 Aug 2022 17:07:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 1150
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/jquery-ui/css/smoothness/jquery-ui.min.css
200 OK 5.3 kB URL HTTP/1.1 evenium-site.com/pro/javascript/jquery-ui/css/smoothness/jquery-ui.min.css
IP
File type ASCII text, with very long lines (25177)
Hash 8254f83da6a32ac8b57f1e18da4b1bd6
6ad0e22a1c2619b1de66dc70d246e640e5554ade
2e69c94252dc7a0083cb5f6b0c1fad2b05d7233806f48ce3c8ca96874ebf9463
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/jquery-ui/css/smoothness/jquery-ui.min.css HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 5314
Keep-Alive: timeout=15, max=195
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
evenium-site.com/pro/graphics/survey/website-common.css
200 OK 381 B URL HTTP/1.1 evenium-site.com/pro/graphics/survey/website-common.css
IP
Hash f38adb8f51ab10ee068a21ddb706d115
888d8952a83d8b8853f29659978db41a719f770a
7f12bc993c394c66f56d5493c2bea5d2fe414313e78561dc55e7026f67d6e850
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/graphics/survey/website-common.css HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 381
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
evenium-site.com/pro/graphics/themes/default/layouts/custom/css/layout.css
200 OK 1.5 kB URL HTTP/1.1 evenium-site.com/pro/graphics/themes/default/layouts/custom/css/layout.css
IP
File type assembler source, ASCII text
Hash 95fa6139be808927b12c5e798db151cf
b9d7cf5e341bbf309da63c473202c8f7705744b7
0cd273389ba2742d1e8054933b947dfd84fe5e596f24ff3d7efa314440a19884
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/graphics/themes/default/layouts/custom/css/layout.css HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 1524
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
evenium-site.com/pro/graphics/survey/facility-default.css
200 OK 5.1 kB URL HTTP/1.1 evenium-site.com/pro/graphics/survey/facility-default.css
IP
Hash 81b523c79b1ad1456a1cc544c8fef4d4
3844e569ff6441afbdacd3feaeb89c3e5683cf10
29123dd32e61aaf0782961552375b16f4e49700f884be8ba1ba7bfc8053546f4
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/graphics/survey/facility-default.css HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 5054
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
evenium-site.com/pro/javascript/jquery.min.js
200 OK 33 kB URL HTTP/1.1 evenium-site.com/pro/javascript/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32769)
Hash fa22e9408feea926523453b20b431575
db6f2a7696f16cb204ef7529382afa29e4e9d27e
9bc2a28111e1c5f5229d0ac66715838426bf1ef6132405d89d2f1e6dc2ea8c21
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/jquery.min.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 33132
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/ng/layout/base/js/tooltip.js
200 OK 401 B URL HTTP/1.1 evenium-site.com/ng/layout/base/js/tooltip.js
IP
Hash e43d0d6724e2052b222aba1d164bbc74
c2f75d7a0b998f2459edbeb2a0be7890c3467c65
a68f84657d574d1484e2c440a704d4a13583ad1e495efdba4a50e0a5070a878b
Analyzer Verdict Alert quad9 Sinkholed
GET /ng/layout/base/js/tooltip.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 16 Aug 2022 17:07:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 401
Keep-Alive: timeout=15, max=194
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/survey_utils.js
200 OK 1.7 kB URL HTTP/1.1 evenium-site.com/pro/javascript/survey_utils.js
IP
File type HTML document, ASCII text
Hash b817b0369e359dea5239d9cabec54d76
c650ab15b23502aa133d00749bd05a351fdf9373
914c65d54d63069ec309da145d8eda47bfb6a1e721aa5b4e056e3496a64f2a42
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/survey_utils.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 1677
Keep-Alive: timeout=15, max=198
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 30 Aug 2022 21:17:12 GMT
Expires: Tue, 30 Aug 2022 21:28:24 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4gjvw37Yt3iJ-XGwdhoxMB-_kk4Dfb-WG_MsSzK8DV8jM-hIFdO0mA==
Age: 1822
evenium-site.com/pro/javascript/menus/pop_events.js
200 OK 1.7 kB URL HTTP/1.1 evenium-site.com/pro/javascript/menus/pop_events.js
IP
Hash f7782a9ef9226507900f0b5ed01bd0cd
3155d1d585bea1ac8aac50a504e4ceef43fc9e55
4d52b50e4f841de1938cebd9faba91278b87a7630cbdec04e68171ce9e3cbb83
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/menus/pop_events.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 1697
Keep-Alive: timeout=15, max=198
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/jquery-ui/js/jquery-ui.min.js
200 OK 60 kB URL HTTP/1.1 evenium-site.com/pro/javascript/jquery-ui/js/jquery-ui.min.js
IP
File type ASCII text, with very long lines (64560)
Hash 5822c2c307d5e9e88359ad54fa831f57
a687df42167589135d6f122aa7ca8d31572f352b
d17c4558181ac118d73eca980861590a4affa3060a1c7f5f18bbcd6bf3260a8e
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/jquery-ui/js/jquery-ui.min.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:50 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 60467
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/graphics/gp_zic/zicon/iconclose.png
200 OK 905 B URL HTTP/1.1 evenium-site.com/pro/graphics/gp_zic/zicon/iconclose.png
IP
File type PNG image data, 26 x 26, 8-bit colormap, non-interlaced\012- data
Hash a8acf2c88f6ed8cb2cf528ebc6dccdf9
15a7210af6c6c8b72a4cf89286ef9ba031191f01
9f6467f1ae549b6318a1104343af2b60d109e09715723e1045d5987ffd5e3506
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/graphics/gp_zic/zicon/iconclose.png HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:46 GMT
Accept-Ranges: bytes
Content-Length: 905
Cache-Control: max-age=604800, public
Vary: User-Agent
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Content-Type: image/png
evenium-site.com/uploads/event_member/169636/IhreAnmeldung2.png
200 OK 32 kB URL HTTP/1.1 evenium-site.com/uploads/event_member/169636/IhreAnmeldung2.png
IP
File type PNG image data, 797 x 292, 8-bit/color RGBA, non-interlaced\012- data
Hash 1fb5678223bb701db4bd4a0ed2082c26
684149f29d561e5fee8e31bf4d38581b3ca528d3
02229b6b4ace18b563c9f327cc58bb1916d65833107e73d0f7ea80cd175da8d4
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/event_member/169636/IhreAnmeldung2.png HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 20 Jul 2022 12:21:16 GMT
Accept-Ranges: bytes
Content-Length: 32039
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, PUT, DELETE, GET, OPTIONS
Access-Control-Allow-Headers: Content-Type, X-Evenium-Application, X-Evenium-Application-Version
X-Robots-Tag: noindex, noarchive
Cache-Control: max-age=604800, public
Vary: User-Agent
Keep-Alive: timeout=15, max=197
Connection: Keep-Alive
Content-Type: image/png
evenium-site.com/uploads/event_member/152287/background/bodyBackground-20191211-105540.png
200 OK 48 kB URL HTTP/1.1 evenium-site.com/uploads/event_member/152287/background/bodyBackground-20191211-105540.png
IP
File type PNG image data, 1023 x 3071, 8-bit/color RGBA, non-interlaced\012- data
Hash ad932bfeb1215b5d7294d51f4febd520
b507d070b95a8f6cd4e9e3d0abc6b43a9259f7de
5fdc36486834fba011cefe3baf1154d87f45eea3bdf6ce382ff95475f90958cd
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/event_member/152287/background/bodyBackground-20191211-105540.png HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 11 Dec 2019 09:55:40 GMT
Accept-Ranges: bytes
Content-Length: 47877
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, PUT, DELETE, GET, OPTIONS
Access-Control-Allow-Headers: Content-Type, X-Evenium-Application, X-Evenium-Application-Version
X-Robots-Tag: noindex, noarchive
Cache-Control: max-age=604800, public
Vary: User-Agent
Keep-Alive: timeout=15, max=198
Connection: Keep-Alive
Content-Type: image/png
ocsp.digicert.com/
200 OK 471 B IP
Hash f67e41cdd7e5f2aa8f93d031979c9109
5f4c0093f9bf8f8e48e0d7f56ed31aba0c6f43f6
608e2b7d208977f18da12165c9eb1539656d7754dc49f3f687736151a4810e06
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4339
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 21:47:34 GMT
Last-Modified: Tue, 30 Aug 2022 20:35:15 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
evenium-site.com/uploads/event_member/168522/Header_Titelbild2.png
200 OK 555 kB URL HTTP/1.1 evenium-site.com/uploads/event_member/168522/Header_Titelbild2.png
IP
File type PNG image data, 798 x 341, 8-bit/color RGBA, non-interlaced\012- data
Size 555 kB (554625 bytes)
Hash ca2e1fc25ab989334e26d426c8ff187b
4f4959c3ca8f8687b2c4983e40e4649510ec79be
c33cd8124fe552c313195e79a6af8f9057fbf0a2aa3c6d595cb2db414d78bb68
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/event_member/168522/Header_Titelbild2.png HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:34 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 30 May 2022 11:33:21 GMT
Accept-Ranges: bytes
Content-Length: 554625
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, PUT, DELETE, GET, OPTIONS
Access-Control-Allow-Headers: Content-Type, X-Evenium-Application, X-Evenium-Application-Version
X-Robots-Tag: noindex, noarchive
Cache-Control: max-age=604800, public
Vary: User-Agent
Keep-Alive: timeout=15, max=193
Connection: Keep-Alive
Content-Type: image/png
evenium-site.com/favicon.ico
200 OK 4.3 kB URL HTTP/1.1 evenium-site.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash f12d4b1f0059131724cd8d5548090957
5f312a424e1d2fa224dd40d819fed06906a4a169
ad22fc310edf6c19f143a47cffe278435e906925e313f31e2fe6cf0630e9d82e
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=s7dSiNiccNebvrf4cFNBLBcA.gl2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 21:47:35 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Tue, 19 Jul 2022 08:28:40 GMT
Accept-Ranges: bytes
Content-Length: 4286
Cache-Control: max-age=604800, public
Vary: User-Agent
Keep-Alive: timeout=15, max=197
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5TSV3jOzOts/75ld0RWqUg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pN5N8JrNOg46zBqB42yyUZaRV8A=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5836
Expires: Tue, 30 Aug 2022 23:24:52 GMT
Date: Tue, 30 Aug 2022 21:47:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5836
Expires: Tue, 30 Aug 2022 23:24:52 GMT
Date: Tue, 30 Aug 2022 21:47:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5836
Expires: Tue, 30 Aug 2022 23:24:52 GMT
Date: Tue, 30 Aug 2022 21:47:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ed547f-030a-462d-a7c7-12a7748cf9c8.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ed547f-030a-462d-a7c7-12a7748cf9c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91310bc1fb5ae0efa502a9bafe046399
ec2a4baf0a21c1738a541d89756cccd6f3bef5fd
5fe0511116c6bd2d6e668c69764905c3a5c93fa23a4dc207b0f4b1604783ceb6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ed547f-030a-462d-a7c7-12a7748cf9c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5925
x-amzn-requestid: 15e5a8fd-8a14-486d-9e83-7da3dafd1713
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpSfZEEooAMFbeA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d312f-05652d4e06746e8b4f4be29b;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:35:43 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: lSs35Lmgha3GkE6sMAJVcAycqK5Kgkgf3GjucztP40NHtOpF_MacKg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 21:46:39 GMT
age: 57
etag: "ec2a4baf0a21c1738a541d89756cccd6f3bef5fd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849c6deb-3aba-41f7-a257-bf54249182ba.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849c6deb-3aba-41f7-a257-bf54249182ba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e0dc790ca607928d609e38f37c012d0
9d37dd425e3319fbb4248718f58371b43d513ce7
7f8ce6d77cbb4be87fb06ffd8f72ae997e006b933382c44b8b4e0a61743f24e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849c6deb-3aba-41f7-a257-bf54249182ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11042
x-amzn-requestid: c92cef27-0a2c-4f5e-86b7-eafa048932b4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XgUlVFdJIAMFRKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63099aee-794a2c5c54fe181b5756e5f6;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 04:17:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wi0vgmd8I7OjHN38lpf-lbr35oxbiVKlyb9QS4s-1_DHvca-l45G4Q==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 21:36:04 GMT
age: 692
etag: "9d37dd425e3319fbb4248718f58371b43d513ce7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9f9132960db725a095b0db1773dc6f69
bf1d4347e1641da5aebe6ae438c0431232ae6242
0e0b84df674d48517a04819604deb555c904518f093784691de4914b6ddb9e9d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10672
x-amzn-requestid: 9044b578-ffc7-4890-a16f-bf6d5e242f46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTWcEUnoAMF_UA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c65c2-4397932f1417f6ab2463c4b0;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:07:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vqHJR_zF8qR54qyIPx-Dqsh6kwjgRmcSF8imM4PLacc4PjhyxvI6ww==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 07:44:52 GMT
age: 50564
etag: "bf1d4347e1641da5aebe6ae438c0431232ae6242"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67641144-189e-4213-b00d-7d27d45f0e9b.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67641144-189e-4213-b00d-7d27d45f0e9b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4aa2a22c2851d082acd55c1c9782cee9
20b6a116eb4d8a7c1321e09c7ad4d8aa1269603e
d0d6a3cc781786f5377191e2b1f3495ac76f4f8af7c56291f761a49a167b8726
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67641144-189e-4213-b00d-7d27d45f0e9b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8684
x-amzn-requestid: b1f808e9-a765-453f-a7cb-2054d3dd45e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTRyGxKIAMFXkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d3271-79de3e365428be651400d407;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:41:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ciFN36F5h8hh3JPmeHR2WtZQcb4F1OUZFUnwntZfTwgST3EkV9Vy1Q==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:52:03 GMT
age: 86133
etag: "20b6a116eb4d8a7c1321e09c7ad4d8aa1269603e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd073058d-a781-4fa3-abd4-05363877c306.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd073058d-a781-4fa3-abd4-05363877c306.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 87425d52d274ccbc12298aa7a47395f2
b2866f84f93b73d97e9aecfa2293ff47131b6d67
2284c74b04493c7a67907b2477bac252832f3550c6a7e57c221abefc45a12549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd073058d-a781-4fa3-abd4-05363877c306.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8478
x-amzn-requestid: 99612ef5-edb6-4e49-87bf-6ecd3071f5de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpSwNG0IIAMFqkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d319a-58b190387602d9643315f916;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:37:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7lkRCgMl7VuI6UsFWnL0VCvy9XZ-Du8MJZS7HWzmr6S88CjzENGurw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:50:47 GMT
age: 86209
etag: "b2866f84f93b73d97e9aecfa2293ff47131b6d67"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa91a5094-5af6-430d-993d-243427b324ba.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa91a5094-5af6-430d-993d-243427b324ba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 82bc1c69018845280d29653d6b2d6f8d
0c122f15422cab7ee3461e8fa657183ae54adcc5
e221638eff281c27ef4656f76e64963718186285c57e50a8958bd3065e662674
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa91a5094-5af6-430d-993d-243427b324ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9980
x-amzn-requestid: b9f6b930-9c47-41b9-879d-ce239e39f033
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTMGHlNoAMFuoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d324d-72ea52c010dff34438bbca28;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:40:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uLci7wtakYizcJUQT4h7dqVwsn8T567hG7b9Gnnz9E0tW1LbcqU4og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Tue, 30 Aug 2022 21:47:30 GMT
age: 6
etag: "0c122f15422cab7ee3461e8fa657183ae54adcc5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
195.154.238.177
143.204.55.36
23.36.76.226
93.184.220.29