dhltracking.net/LW9Mlq
52.2.56.64301 Moved Permanently 0 B IP 52.2.56.64:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /LW9Mlq HTTP/1.1
Host: dhltracking.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
connection: close
x-content-type-options: nosniff
content-type: text/html; charset=utf-8
location: https://dhltracking.net/LW9Mlq
content-length: 0
Date: Fri, 27 Jan 2023 09:32:48 GMT
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14638
Expires: Fri, 27 Jan 2023 13:36:46 GMT
Date: Fri, 27 Jan 2023 09:32:48 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17260
Expires: Fri, 27 Jan 2023 14:20:28 GMT
Date: Fri, 27 Jan 2023 09:32:48 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10592
Expires: Fri, 27 Jan 2023 12:29:20 GMT
Date: Fri, 27 Jan 2023 09:32:48 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 08:42:58 GMT
content-type: application/json
age: 2990
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: amwZqQbDgCr7s2E+nv5zvwrKWMwxVEVtZPioSYCrPm2x/EOsDAVXp8lrqf0AbWXm5Df/PzMW+hY=
x-amz-request-id: GCSW73NRC20A8X0K
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 08:49:21 GMT
age: 2607
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:48 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash d05ce7a410799e36bae2997a0cbd3b39
58aa35479d2f4920dd3d60ab3cf67e11c9f3fbc0
5ed02bed661cbb8df7e7d2441d6a6eec25c2cd85aed9ca88ad7f8ab0f254a296
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5ED02BED661CBB8DF7E7D2441D6A6EEC25C2CD85AED9CA88AD7F8AB0F254A296"
Last-Modified: Thu, 26 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 27 Jan 2023 15:32:49 GMT
Date: Fri, 27 Jan 2023 09:32:49 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 08:49:03 GMT
age: 2626
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
dhltracking.net/LW9Mlq
52.21.33.16302 Found 0 B IP 52.21.33.16:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /LW9Mlq HTTP/1.1
Host: dhltracking.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
connection: close
x-content-type-options: nosniff
content-type: text/html; charset=utf-8
x-powered-by: Short.io link shortener
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
location: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
content-length: 0
Date: Fri, 27 Jan 2023 09:32:49 GMT
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16448
Expires: Fri, 27 Jan 2023 14:06:57 GMT
Date: Fri, 27 Jan 2023 09:32:49 GMT
Connection: keep-alive
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
3.10.94.138200 OK 40 kB URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
IP 3.10.94.138:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (36552)
Hash ed327471348d4438c61526f5205e5064
acda85d981a4ebbd95f606aa2787ea3f20d498b9
fc0c988ec76a5c9dc79a661e48a3ce0db7ab966cce12a0409ab423ddbe9c7807
GET /en/Dhposte/info.php HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: text/html; charset=UTF-8
content-length: 40366
vary: Accept-Encoding
content-encoding: gzip
age: 5500
x-cache: HIT
accept-ranges: bytes
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/default-274a65bae9742377aaf0.woff
3.10.94.138200 OK 41 kB URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/default-274a65bae9742377aaf0.woff
IP 3.10.94.138:0
File type Web Open Font Format, TrueType, length 41084, version 1.66\012- data
Hash 03f859bf58e4d37841070de34be7d978
3436d4fa17e7ee470c3d62b08787cfa7de408408
5af5c3746b03792640b9cafdabddfb2c5407f72988e128541a88fa439607d940
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /en/Dhposte/assets/default-274a65bae9742377aaf0.woff HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: application/font-woff
content-length: 41084
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
etag: "633be074-a07c"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
34.214.101.241101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.101.241:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: igwtC3cnRY4xqwTNfZzP0Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: AjOBQqadBr7ArnHtNvJ81AgDKgY=
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/default-3e828e80f6e985c352eb.woff
3.10.94.138200 OK 44 kB URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/default-3e828e80f6e985c352eb.woff
IP 3.10.94.138:0
File type Web Open Font Format, TrueType, length 44260, version 1.66\012- data
Hash 4a350e02a03ac62e72e9ea575b31ce84
d47b03b96b6e7034a1473a293bb594e597a41dc2
87c40e3961e21f759770615ae67568a3de3ec6e0735f1238a6aae062f4ea15d5
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /en/Dhposte/assets/default-3e828e80f6e985c352eb.woff HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: application/font-woff
content-length: 44260
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
etag: "633be074-ace4"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/default-5a6dd86f272b304a8b83.woff
3.10.94.138200 OK 41 kB URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/default-5a6dd86f272b304a8b83.woff
IP 3.10.94.138:0
File type Web Open Font Format, TrueType, length 41352, version 1.66\012- data
Hash 4e23ecf085132857bdb54b4da7373151
a50215c22a591536b21e509100d1707c6886ffd6
b033eff45e6e8ecd5c5bccd8ef9a96c4dc37325adc64c5aed8b1d909b24c4eb4
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /en/Dhposte/assets/default-5a6dd86f272b304a8b83.woff HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: application/font-woff
content-length: 41352
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
etag: "633be074-a188"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/default-815fcbb4d2c579017011.woff
3.10.94.138200 OK 41 kB URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/default-815fcbb4d2c579017011.woff
IP 3.10.94.138:0
File type Web Open Font Format, TrueType, length 41328, version 1.66\012- data
Hash e39bd2e2657ce5dd6f9c33df18529233
6db81ebb91bfa67cef8f2f870f03046150568799
19d0bda83ecbc986620468801adf000c77c3c38398650903c63fac8dcbac4383
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /en/Dhposte/assets/default-815fcbb4d2c579017011.woff HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: application/font-woff
content-length: 41328
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
etag: "633be074-a170"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/iconfont-af1f172c2480778a6b52.woff
3.10.94.138200 OK 42 kB URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/iconfont-af1f172c2480778a6b52.woff
IP 3.10.94.138:0
File type Web Open Font Format, TrueType, length 41876, version 1.0\012- data
Hash 916d8d6a1c6d256e83de4e2911d549be
ff4b8a2c56e192085eaffcf18e2c939eb8f3f611
104b4da98735ae11def92bc93c7c1f39e90b71c47f2530edcbcb96f7ddbea048
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /en/Dhposte/assets/iconfont-af1f172c2480778a6b52.woff HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: application/font-woff
content-length: 41876
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
etag: "633be074-a394"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/1614969224184.png
3.10.94.138200 OK 2.0 kB URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/1614969224184.png
IP 3.10.94.138:0
File type PNG image data, 214 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d14ab93691604e826e1319d53599eb9
78724360e9d25da584445b851e37bca05abe6b85
3f0c62b5ccdcdbf3b3ae3885f1e6959e2d937eba9b29dea9a6bdb98788041756
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /en/Dhposte/assets/1614969224184.png HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: image/png
content-length: 1998
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
etag: "633be074-7ce"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dhl.com/us-en/home/tracking.html?tracking-id=7113136763-av
96.6.17.154200 OK 37 kB URL HTTP/2 www.dhl.com/us-en/home/tracking.html?tracking-id=7113136763-av
IP 96.6.17.154:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4407)
Hash 97a3bff204f06c032f0136fa60a1df62
b9d35b0728b62590d79ad688f9f888777f9e58f2
b72934a4f2d8a1acea6a0b7c75c6ad47a3d8f7a4af86dfbf0ea7947eaa205046
GET /us-en/home/tracking.html?tracking-id=7113136763-av HTTP/1.1
Host: www.dhl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-frame-options: DENY
content-security-policy: frame-ancestors 'self' https://dhlinsights.dhlsupplychain.dhl.com https://dpdhlcsiace.my.site.com; default-src 'self' data: https: blob: wss://cctr-chat.dhl.com:443 wss://cctr-xchat.dhl.com:443 wss://streaming.mypurecloud.de wss://collection.decibelinsight.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: blob:; style-src 'unsafe-inline' 'self' https: blob:; media-src 'unsafe-inline' 'self' https: blob:
accept-ranges: bytes
content-type: text/html; charset=UTF-8
x-akamai-transformed: 9 - 0 pmb=mTOE,4mRUM,2
content-encoding: gzip
expires: Fri, 27 Jan 2023 09:32:49 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 27 Jan 2023 09:32:49 GMT
content-length: 36883
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
set-cookie: _abck=AB045BD8D7D50982E9EAF8D67A974950~-1~YAAQ3U0kF9cFSM+FAQAAupGS8gnh7hqlTpPlXBRvXbVH/DOuv7rVNQ24sOs/rPlodOoXoaGXXJaSASpgNQCe9t/+3yuMtquLP1biad+AqzJx2T15UZvC7/AaCjVtjrh0FFgOIvxpkmgSIGYTdNqItlIfYWo+fGOgcQBb2Kams6r7HOJOcjY4POISeITPD+vIKNqUOCHBXSKEDIcTjk2yDg/mXMUEZ9asCC2SnGgBtSLtvGi/WiIZndRyVoqZV/x89ijryFjHVSIZXTZxJ0lk1i8TCMEThKDZwcK6kvmSr+UmvV5RMoV8lO+OUqi118tIDpzmh18txNxjnhDe4KoXACqKvKQaVHKoPHZXqdzpHj+yIb7y+krsiDjLcwCYJ/JMxp/nbU1yaWbBiCRFGLte2Yk=~-1~-1~-1; Domain=.dhl.com; Path=/; Expires=Sat, 27 Jan 2024 09:32:49 GMT; Max-Age=31536000; Secure
ak_bmsc=3A5B987ABEC0118BAE84C45788FEC214~000000000000000000000000000000~YAAQ3U0kF9gFSM+FAQAAupGS8hI4Jw19BEznxCqO04xYPNdSS8tg4QRCSJnT76UQPOReMcnNJj4FCw67BqjqBLNiUhvRU7doWgr4RsZnn45obRc/inXKELziza3oa/C232wHVzRm1kPnjGRNKzuYE87tO+Dd5kmESVrdO+mHUjFSxdqy/aHkBYFuXZrUBS2cmgWkhkc3EhwhbjPsxCUc/uNKWkXKWg0ENJNcg6V3pleeLFAueKgJYAvN2nWPxkuhoLOmqxddAY9FAGow+pCnJfBDwS5fuSM8bA0OcukWPFghqEGegnk/qPu6MC1e5VdDdDy92cLhV+Di5wqfJsz/Z+UpjJVFpB4C1PU4Z1ufQ8V/LBf6x0Q6nKYeaMDJURtHTGQ34ncW; Domain=.dhl.com; Path=/; Expires=Fri, 27 Jan 2023 11:32:49 GMT; Max-Age=7200; HttpOnly
bm_mi=4883502B6DC0AD4CA42CBAB96AAB9970~YAAQ3U0kF9kFSM+FAQAAupGS8hJiqLePj8WxPQnzrf8C5Hy8cjwz/SRr0WhsTjALStC8v1EDWoGQAOhlohFaaiG7/Dp371F7IGrXpYS/4oqE/DRyXin5jpabUWIS8hTCmoImZw/OazvtvgPSpiDdYUbss/BmIUIvVrPVSBTqGmCd4o3jTJ/DrhcTqPfiXPUERJuvZFd3PDRomv9cGfP2+2ifnSKK1LX2TIWQjcuq2db5wGHGiEqEYTbEUTspzKWv9lI+BZt5YNEVJOnq5nyqWvnDi5wPPt+16hNW8Ivb1oegldphTtXjYc5uCTgJwqfDybIq6kZQub9OytJPNp1gNruDBQ==~1; Domain=.dhl.com; Path=/; Expires=Fri, 27 Jan 2023 09:32:49 GMT; Max-Age=0; Secure
bm_sz=B552D728CA9F18658ACF750409E63CD8~YAAQ3U0kF9oFSM+FAQAAupGS8hJW23eDA40KncMIUh+WL/hLQCTePOh3fgChCBJDIPHxtVANLRSE6zLeRL2wEONLZRunFHV8pdk8xELI2vW3whoMMc3Xc6nNHIddi2vHPoyKDxZHNfgSHOU5riMvP0GI552g8eY6Qq3EXalculjaRVx+cQvRhzdCsdFum+62xqVmyJZrIDMG6/k6HtR6wcYu/MkJDENHvl0etCxRkG6KVMAmGwTcnwUzkG+jrqDhDRN/GLjHMIhxdID3/jNBEGn/vjjFmG67sq/95MKYk2XlF3j2FXGltUqZFOOYEc2QRzEKGPxsEGjJxOEV3fyzm/+gCO9dBbiCzhu/4Jr3z4y/J6BXUP0iwCbRKWrG1sBFXifPl3UBEFFnBuHE~3617346~3294259; Domain=.dhl.com; Path=/; Expires=Fri, 27 Jan 2023 13:32:49 GMT; Max-Age=14400
X-Firefox-Spdy: h2
s2.go-mpulse.net/boomerang/RSVGU-547KJ-ZUMZD-ZW27F-P4RHY
104.110.16.174200 OK 50 kB URL HTTP/2 s2.go-mpulse.net/boomerang/RSVGU-547KJ-ZUMZD-ZW27F-P4RHY
IP 104.110.16.174:0
File type C source, ASCII text, with very long lines (65103)
Hash 8991c3ec80ec8fbc41382a55679e3911
8cc8cee91d671038acd9e3ae611517d6801b0909
f55bacd4a20fef96f5c736a912d1947be85c268df18003395e511c1e860e8800
GET /boomerang/RSVGU-547KJ-ZUMZD-ZW27F-P4RHY HTTP/1.1
Host: s2.go-mpulse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
cache-control: max-age=604800
content-encoding: br
last-modified: Mon, 16 Jan 2023 08:21:41 GMT
timing-allow-origin: *
vary: Accept-Encoding
content-length: 50393
date: Fri, 27 Jan 2023 09:32:50 GMT
X-Firefox-Spdy: h2
c.go-mpulse.net/api/config.json?key=RSVGU-547KJ-ZUMZD-ZW27F-P4RHY&d=wordpressmu-917556-3184979.cloudwaysapps.com&t=5582707&v=1.720.0&if=&sl=0&si=d0dd178e-ebc6-4967-b38a-00dab74d8f4b-rp516o&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=326248
2.18.172.137200 OK 51 B URL HTTP/1.1 c.go-mpulse.net/api/config.json?key=RSVGU-547KJ-ZUMZD-ZW27F-P4RHY&d=wordpressmu-917556-3184979.cloudwaysapps.com&t=5582707&v=1.720.0&if=&sl=0&si=d0dd178e-ebc6-4967-b38a-00dab74d8f4b-rp516o&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=326248
IP 2.18.172.137:0
File type JSON data\012- , ASCII text
Hash fab3350f517d18b7477da4ae18a9c167
de5f852dd26c67317a93786d90be83834155ae4b
b5f00536668e50df07ecb903e83a51385cc341ba621ee6933be30794fdd92586
GET /api/config.json?key=RSVGU-547KJ-ZUMZD-ZW27F-P4RHY&d=wordpressmu-917556-3184979.cloudwaysapps.com&t=5582707&v=1.720.0&if=&sl=0&si=d0dd178e-ebc6-4967-b38a-00dab74d8f4b-rp516o&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=326248 HTTP/1.1
Host: c.go-mpulse.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wordpressmu-917556-3184979.cloudwaysapps.com
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: private, max-age=120, stale-while-revalidate=60, stale-if-error=120
Timing-Allow-Origin: *
Content-Length: 51
Date: Fri, 27 Jan 2023 09:32:50 GMT
Connection: keep-alive
Content-Type: application/json
www.dhl.com/us-en/home/tracking.html?tracking-id=7113136763-av
96.6.17.154200 OK 37 kB URL HTTP/2 www.dhl.com/us-en/home/tracking.html?tracking-id=7113136763-av
IP 96.6.17.154:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4407)
Hash d2c626b85800d65517ef847c59bdc6f8
04d542a7eb465a79abdf065047cc0b5f2614b8f0
9b348fb24d560c160096975c9751b0a505b3210fbf13c628ce26b106db5fdd09
GET /us-en/home/tracking.html?tracking-id=7113136763-av HTTP/1.1
Host: www.dhl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-frame-options: DENY
content-security-policy: frame-ancestors 'self' https://dhlinsights.dhlsupplychain.dhl.com https://dpdhlcsiace.my.site.com; default-src 'self' data: https: blob: wss://cctr-chat.dhl.com:443 wss://cctr-xchat.dhl.com:443 wss://streaming.mypurecloud.de wss://collection.decibelinsight.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: blob:; style-src 'unsafe-inline' 'self' https: blob:; media-src 'unsafe-inline' 'self' https: blob:
accept-ranges: bytes
content-type: text/html; charset=UTF-8
x-akamai-transformed: 9 - 0 pmb=mTOE,4mRUM,2
content-encoding: gzip
expires: Fri, 27 Jan 2023 09:32:50 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 27 Jan 2023 09:32:50 GMT
content-length: 36884
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
set-cookie: _abck=44910F87622CA4B9893CF18A1B9A74DF~-1~YAAQ3U0kF+UFSM+FAQAAqZWS8gn657DgQwknpTShG8LFPvQ5WSGkfC7vfa2DY53Dv6wespWHdebpSTYwo+wGNe9pkPmf3BfcX2Qx06pv/rioEE00AEsY4s7HsRHoT2N2eqtnR+qJcI3jYaGuvRNGhN+AvoqauPf9qGEFNUDJ3xiiUuTSRKIfx6ZgA36f2l/G8gYHqjWc+hYug7PCNoGWjiABcBTCGtJtoPE0FjwfUyB5Ydtcttbh/lCHQLpuP/1SQAdGEPL5luBwC7dNAuw3ydRvD1qrrK8UV232mVqm3leK619gKrkqYrgtzfBj54PC69WNcfBv2uW9JWEIql+moLlwpHKDNIAzU+34m/Gf4Daf/rNGoVt3uhmw4XO8vdrOvPlnBzaqaqkyTBkz0+k5FGA=~-1~-1~-1; Domain=.dhl.com; Path=/; Expires=Sat, 27 Jan 2024 09:32:50 GMT; Max-Age=31536000; Secure
ak_bmsc=925A800C32B08EAECB8E661EA7AA2673~000000000000000000000000000000~YAAQ3U0kF+YFSM+FAQAAqZWS8hJD08IMcdnTyv3qhJED/tlHDRgjhDLOPXZfftOz2btt3/cwFD2ywa56mxxQYGN5sE73SpDAIlI4kkV/nznxwthr+GZAayv7BOWoPjmWxs53kPT4xq7gc506i2qKN3UrBsAlm/ShS5sFN5Rp+X5MdInWDIFi23EG3T3QQk3tGTlcpLtcVQWTx3koYXGW/rJZHQTWar/4JcK29FQ5RrqYrznAXCkPeY5BkdegclCBICvApKaZpjKhp4EyofHYpEbSk3iGom3Hmyy1r38EQQ3FQrTftR2mw64T0aDA/rlMEJFKSWlyGK9ZRbdzb2oOMNwH2vBy4Q2zpGdosrVyv+mBnx2X/RnS0L42QeTpo+SfulkZBs7Q; Domain=.dhl.com; Path=/; Expires=Fri, 27 Jan 2023 11:32:50 GMT; Max-Age=7200; HttpOnly
bm_mi=B5C55BE5058786A6FF50CFE38885E820~YAAQ3U0kF+cFSM+FAQAAqZWS8hL9r8Nq4G0aGulMXt94lMXLa7vArrj8oWfRDSdIEr3a8tefrQF7tkFOvlIKmJTk/sAuPyksAMWWWSMLiTMDKnz3v9GSFR7SODTiy3AXqMF2xUfc7RYHu3vcUhBkYmqlPAYKY++/u4gHGr/2pDLejvkQvr+TOgb+mriSjX1CkpMBFnK+/xIjbgBrb1UZO+8yM2w5chrjJYmyQrg86vpqRkCEmv3Ckc8lTvy/UtRzlUO+kFHjpi3E+FJKhbeX3XQv9e+sRW2kb/q7rWr7wkKbT/vYnCjTA10g2E9xnhrxpSS4CL+BOm9q9FT08NpFkVlgrQ==~1; Domain=.dhl.com; Path=/; Expires=Fri, 27 Jan 2023 09:32:50 GMT; Max-Age=0; Secure
bm_sz=69298DFC4AAAA8402D9077439C0DD35B~YAAQ3U0kF+gFSM+FAQAAqZWS8hKRPmBf4TdZXJi8yIAQTeUVXzBZ/WG5KatWysj9LO1QXzRHSyFCYOQKFBFjrX5T1FEDMbzc/IVcsIVXax7NR3hdHunpSsCPbq6FzOi8cnD+dPXpt8QOAK6HNcXbiIzQt2+qny7zABvf53oYL9BYIVNjI6d1ymfmBB48iCZzOk9hPITcmF0vqFyG2mXrppx58Xmku4sMcgSGKt7K+YR2VrtUSqGATOWb3j3ardrmZ8Vrqq3SkiG2JQjVABS74bXY6Em2pbVPm84VwQF4HkD2fK2lcjbE/CDqtCcOyEW7pRmKOurgL0gR76bslZ4QtDch1VL8vM5svigjJRtLd+WlCKI9/8CcnO9vqQ1FpgmeNdaNbGzLcmA0kWYW~3290680~3425603; Domain=.dhl.com; Path=/; Expires=Fri, 27 Jan 2023 13:32:50 GMT; Max-Age=14400
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4069
Expires: Fri, 27 Jan 2023 10:40:40 GMT
Date: Fri, 27 Jan 2023 09:32:51 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4069
Expires: Fri, 27 Jan 2023 10:40:40 GMT
Date: Fri, 27 Jan 2023 09:32:51 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4069
Expires: Fri, 27 Jan 2023 10:40:40 GMT
Date: Fri, 27 Jan 2023 09:32:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dc869235086902c4acc379733b6bfdb8
0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae
e614e29b14e69209fd4b82a688290f7a3f541909833a6558cf480aca899bab6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9056
x-amzn-requestid: 81cf473d-8dc6-49e7-b012-d0b7dfaec7f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fB4COHTlIAMFtRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca3a0e-0848461c054db5c66fde9107;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 06:51:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fdefZSZfSJi1-C7ZTSahawckLN-To4P91H-n1cyPqw34f18VzTeHRg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 12:54:06 GMT
age: 74325
etag: "0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e96f3ea585b5fa8ed6446ed16e2b4b2
f90c205f370a2426dffe3c21b24bfa551b385556
6967ba25887f87200fcb39a3e6f065fd27596b2ebcf0d33a2751c655d6e724f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4272
x-amzn-requestid: e051c22b-c2ec-4e59-b29b-ba1464d8015b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRz28G13oAMFeeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d099c5-48b013ff34b9702a6d2fd560;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 02:53:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: X4SfAYS0JvW4sUNqSuBERNBwaI_xgKugxZ76_fsih_LSnImMC7Pnzg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 03:37:14 GMT
age: 85438
etag: "f90c205f370a2426dffe3c21b24bfa551b385556"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.dhl.com/etc/clientlibs/dhl/clientlib-all/assets/appletouch/apple-touch-icon-180x180.png
96.6.17.154200 OK 1.2 kB URL HTTP/2 www.dhl.com/etc/clientlibs/dhl/clientlib-all/assets/appletouch/apple-touch-icon-180x180.png
IP 96.6.17.154:0
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash 6e5f4e072a2793f9d9cd2a6974d5ccc9
df0d0b28ae71a37dd321d33435c3143a446e2741
148a09a41b13df86b44d2a1f70e2482e5d31fd91ce540a0dbe016011a5fd29b9
GET /etc/clientlibs/dhl/clientlib-all/assets/appletouch/apple-touch-icon-180x180.png HTTP/1.1
Host: www.dhl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-frame-options: DENY
content-security-policy: frame-ancestors 'self' https://dhlinsights.dhlsupplychain.dhl.com https://dpdhlcsiace.my.site.com; default-src 'self' data: https: blob: wss://cctr-chat.dhl.com:443 wss://cctr-xchat.dhl.com:443 wss://streaming.mypurecloud.de wss://collection.decibelinsight.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: blob:; style-src 'unsafe-inline' 'self' https: blob:; media-src 'unsafe-inline' 'self' https: blob:
last-modified: Wed, 18 Jan 2023 17:22:45 GMT
etag: "495-5f28d108f0b81"
accept-ranges: bytes
content-length: 1173
content-type: image/png
cache-control: public, max-age=104091
expires: Sat, 28 Jan 2023 14:27:42 GMT
date: Fri, 27 Jan 2023 09:32:51 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.dhl.com/etc/clientlibs/dhl/clientlib-all/assets/favicon.ico
96.6.17.154200 OK 1.2 kB URL HTTP/2 www.dhl.com/etc/clientlibs/dhl/clientlib-all/assets/favicon.ico
IP 96.6.17.154:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash d8106bf3a1d00ab43b01e6e3c92500eb
202b5e8654ab1b28351378293bca3b9d844cc29b
9ada5709e264c31b04a05bd85448a9bd5e91925e8d83df5cef0762ec97cc283e
GET /etc/clientlibs/dhl/clientlib-all/assets/favicon.ico HTTP/1.1
Host: www.dhl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-frame-options: DENY
content-security-policy: frame-ancestors 'self' https://dhlinsights.dhlsupplychain.dhl.com https://dpdhlcsiace.my.site.com; default-src 'self' data: https: blob: wss://cctr-chat.dhl.com:443 wss://cctr-xchat.dhl.com:443 wss://streaming.mypurecloud.de wss://collection.decibelinsight.net; script-src 'unsafe-inline' 'unsafe-eval' 'self' https: blob:; style-src 'unsafe-inline' 'self' https: blob:; media-src 'unsafe-inline' 'self' https: blob:
last-modified: Wed, 18 Jan 2023 15:44:29 GMT
etag: "47e-5f28bb121a433"
accept-ranges: bytes
content-length: 1150
content-type: image/ico
cache-control: public, max-age=192328
date: Fri, 27 Jan 2023 09:32:51 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 23:01:22 GMT
age: 37889
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5623b111-3a93-4843-8a40-550089a3d3eb.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5623b111-3a93-4843-8a40-550089a3d3eb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5de6b54196befa95e9291a051c645d0
e3100707a4e9b1d5c30223d31f58cd6ee8ad010b
5bcc3dd7011df4e17d7ef86d892fedeca14b0d0eabbe782fecf35c9a82b25e40
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5623b111-3a93-4843-8a40-550089a3d3eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7804
x-amzn-requestid: 4cd6ed50-202c-4e57-94db-cc6585dca5b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLQWuH20oAMFxzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cdfa91-05441777646d154650c97512;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 03:10:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: D6nD7sD6FQavjUir9rxJlh9U2reSno5qNQ0qQdG4iS6hscVfSHdBCQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 22:01:13 GMT
age: 41498
etag: "e3100707a4e9b1d5c30223d31f58cd6ee8ad010b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e7158416f60576804ccff03307319fe
a342f94625e913fa6b8d862a59979f1e3ad80dd1
5c525df7d169cc7e033d920c11f4a0163a781c025a22b70530882b56964a9a52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5737
x-amzn-requestid: cc977ea9-c418-4a5a-a13b-c86e16bbe6ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRGPFGL5oAMFiSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d050c6-2d540cac5ca7d4e64cfdb8bc;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 21:42:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uZnA5gkRlZyqamh_n3992G9PlMJa4gJ-mjSOQEysII73dDKLXmeXsg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 12:26:22 GMT
age: 75989
etag: "a342f94625e913fa6b8d862a59979f1e3ad80dd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MeE0Qrn_yZvUApGQTbOKQ14Z2ipPLbPFPyVqkKTk0Bs7ETn0UU6yMg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:48:43 GMT
age: 42248
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/instagram-new.svg
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/instagram-new.svg
IP 3.10.94.138:0
GET /en/Dhposte/assets/instagram-new.svg HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: image/svg+xml
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-119c"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/AppMeasurement_Module_ActivityMap.min.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/AppMeasurement_Module_ActivityMap.min.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/AppMeasurement_Module_ActivityMap.min.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/bundle.1954c5426f68eda7617801abb8137890.css
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/bundle.1954c5426f68eda7617801abb8137890.css
IP 3.10.94.138:0
GET /en/Dhposte/assets/bundle.1954c5426f68eda7617801abb8137890.css HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: text/css
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-9aedd"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/ewf-components.65a1bd4603b993ef5ce093ddaf523edda3fa3cf4d4c8a2f22244f06aead499d9.css
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/ewf-components.65a1bd4603b993ef5ce093ddaf523edda3fa3cf4d4c8a2f22244f06aead499d9.css
IP 3.10.94.138:0
GET /en/Dhposte/assets/ewf-components.65a1bd4603b993ef5ce093ddaf523edda3fa3cf4d4c8a2f22244f06aead499d9.css HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: text/css
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-366dc"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/ewf-cosmetic.e40a9a364527faf7d25996e77d255df8a8b70ea08e1d90a9c050c3aee15e965d.css
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/ewf-cosmetic.e40a9a364527faf7d25996e77d255df8a8b70ea08e1d90a9c050c3aee15e965d.css
IP 3.10.94.138:0
GET /en/Dhposte/assets/ewf-cosmetic.e40a9a364527faf7d25996e77d255df8a8b70ea08e1d90a9c050c3aee15e965d.css HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: text/css
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-1f4d"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/RC1780f6c2747d4c8eabb3f49ff8cf621a-source.min.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/RC1780f6c2747d4c8eabb3f49ff8cf621a-source.min.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/RC1780f6c2747d4c8eabb3f49ff8cf621a-source.min.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/ewf-base.bc96cf7a4207f90058c9696c6a248f0b898ccb7194bdb1955ca6bd76784b8281.css
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/ewf-base.bc96cf7a4207f90058c9696c6a248f0b898ccb7194bdb1955ca6bd76784b8281.css
IP 3.10.94.138:0
GET /en/Dhposte/assets/ewf-base.bc96cf7a4207f90058c9696c6a248f0b898ccb7194bdb1955ca6bd76784b8281.css HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: text/css
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-3b65a"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/sec-3-6.css
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/sec-3-6.css
IP 3.10.94.138:0
GET /en/Dhposte/assets/sec-3-6.css HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: text/css
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-669"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/otSDKStub.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/otSDKStub.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/otSDKStub.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/otBannerSdk.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/otBannerSdk.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/otBannerSdk.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/bundle.1954c5426f68eda7617801abb8137890.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/bundle.1954c5426f68eda7617801abb8137890.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/bundle.1954c5426f68eda7617801abb8137890.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/RCc9f7f8cb76ec492d8b222a8d9c393cfc-source.min.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/RCc9f7f8cb76ec492d8b222a8d9c393cfc-source.min.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/RCc9f7f8cb76ec492d8b222a8d9c393cfc-source.min.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/bundle-utapi.1954c5426f68eda7617801abb8137890.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/bundle-utapi.1954c5426f68eda7617801abb8137890.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/bundle-utapi.1954c5426f68eda7617801abb8137890.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Cookie: cookieDisclaimer=seen
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/RC3c7ceb81611c4de3aca0d4f8bcf4e7a8-source.min.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/RC3c7ceb81611c4de3aca0d4f8bcf4e7a8-source.min.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/RC3c7ceb81611c4de3aca0d4f8bcf4e7a8-source.min.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/main.b2425edb.chunk.css
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/main.b2425edb.chunk.css
IP 3.10.94.138:0
GET /en/Dhposte/assets/main.b2425edb.chunk.css HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: text/css
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-551"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/launch-ENa2e710b79eef40758cbb936003b8b231.min.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/launch-ENa2e710b79eef40758cbb936003b8b231.min.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/launch-ENa2e710b79eef40758cbb936003b8b231.min.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/sec-cpt-3-6.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/sec-cpt-3-6.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/sec-cpt-3-6.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/linkedIn-new.svg
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/linkedIn-new.svg
IP 3.10.94.138:0
GET /en/Dhposte/assets/linkedIn-new.svg HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: image/svg+xml
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-66f"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/bundle-utapi.1954c5426f68eda7617801abb8137890.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/bundle-utapi.1954c5426f68eda7617801abb8137890.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/bundle-utapi.1954c5426f68eda7617801abb8137890.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/glo-footer-logo.svg
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/glo-footer-logo.svg
IP 3.10.94.138:0
GET /en/Dhposte/assets/glo-footer-logo.svg HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: image/svg+xml
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-2ec0"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/AppMeasurement.min.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/AppMeasurement.min.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/AppMeasurement.min.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/etc/dhl/chat/MyDHLPlusChatProvider/clientlib.min.150d0bf33df951877b7d153ac9985ca19bd169d1b9760306200558dd82cf1106.js
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/etc/dhl/chat/MyDHLPlusChatProvider/clientlib.min.150d0bf33df951877b7d153ac9985ca19bd169d1b9760306200558dd82cf1106.js
IP 3.10.94.138:0
GET /etc/dhl/chat/MyDHLPlusChatProvider/clientlib.min.150d0bf33df951877b7d153ac9985ca19bd169d1b9760306200558dd82cf1106.js HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/layout.min.b1f965eb8df1f3d23c5b48dd583355eefb80e308b174cab4025f5291a368374e.css
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/layout.min.b1f965eb8df1f3d23c5b48dd583355eefb80e308b174cab4025f5291a368374e.css
IP 3.10.94.138:0
GET /en/Dhposte/assets/layout.min.b1f965eb8df1f3d23c5b48dd583355eefb80e308b174cab4025f5291a368374e.css HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: text/css
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-194d9"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/bundle-utapi.1954c5426f68eda7617801abb8137890.css
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/bundle-utapi.1954c5426f68eda7617801abb8137890.css
IP 3.10.94.138:0
GET /en/Dhposte/assets/bundle-utapi.1954c5426f68eda7617801abb8137890.css HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: text/css
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-2b15"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/CFlJBAc
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/CFlJBAc
IP 3.10.94.138:0
GET /en/Dhposte/assets/CFlJBAc HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/otBannerSdk.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/otBannerSdk.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/otBannerSdk.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/facebook-new.svg
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/facebook-new.svg
IP 3.10.94.138:0
GET /en/Dhposte/assets/facebook-new.svg HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: image/svg+xml
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-57e"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/AppMeasurement_Module_ActivityMap.min.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/AppMeasurement_Module_ActivityMap.min.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/AppMeasurement_Module_ActivityMap.min.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/RCc9f7f8cb76ec492d8b222a8d9c393cfc-source.min.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/RCc9f7f8cb76ec492d8b222a8d9c393cfc-source.min.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/RCc9f7f8cb76ec492d8b222a8d9c393cfc-source.min.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/youtube-new.svg
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/youtube-new.svg
IP 3.10.94.138:0
GET /en/Dhposte/assets/youtube-new.svg HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:49 GMT
content-type: image/svg+xml
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-584"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/RCaa79568c73f04514b261f130a8ca2dbc-source.min.js.download
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/RCaa79568c73f04514b261f130a8ca2dbc-source.min.js.download
IP 3.10.94.138:0
GET /en/Dhposte/assets/RCaa79568c73f04514b261f130a8ca2dbc-source.min.js.download HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/CFlJBAc
3.10.94.138404 Not Found 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/CFlJBAc
IP 3.10.94.138:0
GET /en/Dhposte/assets/CFlJBAc HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Cookie: cookieDisclaimer=seen
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://wordpressmu-917556-3184979.cloudwaysapps.com/index.php/wp-json/>; rel="https://api.w.org/"
age: 0
x-cache: MISS
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/saved_resource(1).html
3.10.94.138200 OK 0 B URL HTTP/2 wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/assets/saved_resource(1).html
IP 3.10.94.138:0
GET /en/Dhposte/assets/saved_resource(1).html HTTP/1.1
Host: wordpressmu-917556-3184979.cloudwaysapps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wordpressmu-917556-3184979.cloudwaysapps.com/en/Dhposte/info.php
Cookie: cookieDisclaimer=seen
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 09:32:50 GMT
content-type: text/html
last-modified: Tue, 04 Oct 2022 07:27:48 GMT
vary: Accept-Encoding
etag: W/"633be074-95"
x-robots-tag: noindex, nofollow
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2