| englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg | 104.21.14.228 | 301 Moved Permanently | 0 B |
URL HTTP/1.1englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg IP104.21.14.228:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 20 Oct 2022 22:55:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 20 Oct 2022 23:55:31 GMT
Location: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WKzZ9qps4GHEhr%2BydKZ9EH28N3N2WiyX3bjPmYVRSxo2b%2FWSUTUB6L1c7ovzUzAaUlAszNxtvj6OIj6I4AnlROXzaD6LxTgr0xUwTn60Kk%2FTGJRX339Lt4%2Fnf6%2BiqCq6kollHsY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75d5576b8bbbb4f1-OSL
alt-svc: h2=":443"; ma=60
|
|
| firefox.settings.services.mozilla.com/v1/ | 143.204.55.27 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.27:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashbdb8b66c705a7b996496d780f50c00b5 403ae92039fcc933870f51f913f78ccaf9652256 c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 20 Oct 2022 22:52:00 GMT
Expires: Thu, 20 Oct 2022 23:37:57 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: V1SPa-mJB15b970AUuuzBFGMzbSfpr0veeFY2p-TrR-b_RmFVt7Apg==
Age: 211
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash24a97183f836954e0f05c4dc794ff4d1 52778bbe39b9f736c16b5798575d1d96607ce9d0 01f6721f2674f54662fff590fdf7247cc8c58a3f84906cae75527fb7b6dd2436
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01F6721F2674F54662FFF590FDF7247CC8C58A3F84906CAE75527FB7B6DD2436"
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9277
Expires: Fri, 21 Oct 2022 01:30:08 GMT
Date: Thu, 20 Oct 2022 22:55:31 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9dc4f23f82148797f6d8041bdda3c7f7 6841ded3e2dd94fd762316d01efd43f7aafb8354 e229db1854a85b320cee574e805210f3adf5797136ea820c0a0ce9abcd63d4dd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E229DB1854A85B320CEE574E805210F3ADF5797136EA820C0A0CE9ABCD63D4DD"
Last-Modified: Thu, 20 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9276
Expires: Fri, 21 Oct 2022 01:30:07 GMT
Date: Thu, 20 Oct 2022 22:55:31 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 344 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash77fbcaf652df946556c2588cf9eca34e 3be97ac1da0947a0154704c470d6de92ae2d0306 8fe663bfe3e5dc27d9f2dd2fd07dd925e3cedcab0c72d37b0a5f39178b6652fd
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "8FE663BFE3E5DC27D9F2DD2FD07DD925E3CEDCAB0C72D37B0A5F39178B6652FD"
Last-Modified: Thu, 20 Oct 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13246
Expires: Fri, 21 Oct 2022 02:36:17 GMT
Date: Thu, 20 Oct 2022 22:55:31 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xCrpFYbrHBrmHh9yCeeX66i3xOZJ2Qi7EkX/C297itcgZxrCq1CiuZXSAu+9fs+WP32eeSApkLk=
x-amz-request-id: Q3WSFMS9H564D4WR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 20 Oct 2022 22:04:52 GMT
age: 3039
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/img/loading.gif | 172.67.160.188 | 200 OK | 39 kB |
URL HTTP/2englishzone.com.br/qq/img/loading.gif IP172.67.160.188:0
File typeGIF image data, version 89a, 200 x 200\012- data Hashd10ef01e81faa2c2d812bdf670b4e072 77d09a57b2091fd7665dff763a5eab23e0ff907e 5e3d5246b17e19e65385092db07554d8e1c5c4a226a6d7f97824b8e1e8571e34
GET /qq/img/loading.gif HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: image/gif
content-length: 38636
last-modified: Sat, 11 Aug 2018 15:03:50 GMT
etag: "701c0b-96ec-5732a2af3e180"
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p4Goeqw9sd8iVvodOOWgYNH0lWD4ee985RkjQ1q1ymESudMrq89KijwUkttoCkv1bM96fxwX0Fu8HpPc91ahancRZwFA12dVRXsescr73%2FrsV%2FbvFXt%2BQKD7zom1hKVGZeUMZtU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75d5576fba050b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/img/alert.gif | 172.67.160.188 | 200 OK | 6.9 kB |
URL HTTP/2englishzone.com.br/qq/img/alert.gif IP172.67.160.188:0
File typeGIF image data, version 89a, 240 x 240\012- data Hash6b3fe3fcfdc8a4f64ce935194f5591ab 64d7c83fa447c9b84997b034d8434155ae53163e 86a86f9ba8a23418cb079bbf61fe64974770fb416a27384ef80045976487894e
GET /qq/img/alert.gif HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: image/gif
content-length: 6926
last-modified: Tue, 07 Apr 2020 04:12:04 GMT
etag: "701a79-1b0e-5a2ab960b8d00"
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CiYI0aRgNyzfexjO9odVkSupHuo4U8PWWQ5s0eEVSC2uBBiIYkrJl7DIf0u2%2FrH5%2BF4w7xfB6CkO9HPYPKNkPK72xD5UNSxU59OHqzCplb59wz5nzU%2BMDH0lYpd1XnJGQL23bVI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75d5576fba070b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/img/congra.png | 172.67.160.188 | 200 OK | 22 kB |
URL HTTP/2englishzone.com.br/qq/img/congra.png IP172.67.160.188:0
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data Hash1cb46cbb550a7047d40ff30244ca144b 8c41692d4a18624338f9ec32f569b028aa20f827 065a5ede3e090578c581c77883c6acfa9dc9393efc2f19775cfb410263fa8e1c
GET /qq/img/congra.png HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: image/png
content-length: 22060
last-modified: Mon, 02 Dec 2019 21:22:14 GMT
etag: "701bff-562c-598bf2c5cad80"
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3fa%2F4bubbldRNZJzxGkFk2AvK2otGlsfgup6T7a9wopXT00Jc14hyshpEg53rNsmes0U0z0RsXQKe81r35svrirU5JmWdOU65u4e3dp8hEeT%2BteuC0ChK9xFr%2BFSsVPTeNfRGFo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75d5576fba080b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/img/aioe_icon_1_pid_lg.png | 172.67.160.188 | 200 OK | 4.0 kB |
URL HTTP/2englishzone.com.br/qq/img/aioe_icon_1_pid_lg.png IP172.67.160.188:0
File typePNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data Hash210d4f89d07fe1f8fd4d9a319e63933f 8b9f60d4c9368881d3cfb41fb7426675e03619db 8e2e5ed99b3cf11d88f281c0ad9ac0aaa30c311515536c8a9c90be58ca56ec39
GET /qq/img/aioe_icon_1_pid_lg.png HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: image/png
content-length: 4004
last-modified: Mon, 20 Sep 2021 21:51:00 GMT
etag: "701a02-fa4-5cc7446d21900"
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6QeX7YFdNUalS5h61YyUhaQ4F6rYrsu8K1BO3VDNYFmcuJTHQplkTZn5Ein8yVjPi6C0Y1KOs%2BSQISJJTNGc1QHLTCfWbrBg6N4Ummb%2BvHXtQSsmHlNyprPQ4Rh20ZmCzrrDqpg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75d5576fba0c0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/img/emdef213.png | 172.67.160.188 | 200 OK | 26 kB |
URL HTTP/2englishzone.com.br/qq/img/emdef213.png IP172.67.160.188:0
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data Hashf97e9297a90a73c16b5734c0910785ce d9df719d58da061ccf75349314e562f8b22b76d3 9f926e83679171e34c289ff3aa5b7f067e75cfa564345f53941ca824c42d5f77
GET /qq/img/emdef213.png HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: image/png
content-length: 26120
last-modified: Sun, 05 Apr 2020 03:34:26 GMT
etag: "701c02-6608-5a282d3c67480"
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8SbyQXQEgqw%2B6GIdKznx8maghkva90JgtwWE%2FqSr045%2BKD8XPhtguhVcsYBAckqOA1pMOf00xS%2FCDeS1dLjE9xfmc6mzMa0RkakEwz3S8PHtYfr6cDX1hqzINRYms49DNvd8TDA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75d5576fba0a0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/img/aioe_icon_3_devices_lg.png | 172.67.160.188 | 200 OK | 3.7 kB |
URL HTTP/2englishzone.com.br/qq/img/aioe_icon_3_devices_lg.png IP172.67.160.188:0
File typePNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data Hash33ac311a458863ee4fc16b6fae4a40b5 9b65fd7af34bdaaddcde363383114f706b335ad8 e457f20d64d186c61a8467fe70d4eec890ed7fb85d5de2a9fc31834567131a1f
GET /qq/img/aioe_icon_3_devices_lg.png HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: image/png
content-length: 3677
last-modified: Mon, 20 Sep 2021 21:54:26 GMT
etag: "701a59-e5d-5cc7453196880"
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gEAUcUFakOSlzbztvZgGux3Mpz0FsTLxoAU%2BYpC8CNL%2FNx0IZ%2BnO9aHvoKgZHuv2L4OCtjVv0B5CNriTofIs2T3N%2BQyJwOKCDI1stg%2BN8DrTS0EH9dP5hwV3Uh4dcbDvC%2FL%2Brrw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75d5576fca0e0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/img/aioe_icon_2_card_lg.png | 172.67.160.188 | 200 OK | 3.3 kB |
URL HTTP/2englishzone.com.br/qq/img/aioe_icon_2_card_lg.png IP172.67.160.188:0
File typePNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced\012- data Hashb8ce783abcee5ceb012b84d6f275b908 ef64977d3f752bdefd0df2360600908ef8575324 ec7a2e669f551ad0588a2ce4b1ee04fd5ae9ee16042fc97d022c6b287b9a6494
GET /qq/img/aioe_icon_2_card_lg.png HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: image/png
content-length: 3262
last-modified: Mon, 20 Sep 2021 21:53:10 GMT
etag: "701a53-cbe-5cc744e91bd80"
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XfoYrqEgqJlzBXlvBoWmCTv5m4AShYrZcc6tcNGYo%2B3fQWjDmdGDa3mYvJu%2BEWJTaTc6THEX8Ncta7IMxJ3FE11qIpgFT00qEU4AG5%2BoqSr8CfeY0Obbl4X2FzYlYVuOsYCuuak%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75d5576fca0f0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/js/jquery.CardValidator.js | 172.67.160.188 | 200 OK | 2.4 kB |
URL HTTP/2englishzone.com.br/qq/js/jquery.CardValidator.js IP172.67.160.188:0
Hashb1d2696629b3fded6f83a01f7ead9941 6d0b7b2918844d7a25cc9814f82536ceaafafdae f3c6ea8a0016cf12a3c79808615b0cb53eab21427517e8f1d00fc102910ca110
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /qq/js/jquery.CardValidator.js HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2017 01:03:08 GMT
etag: W/"701c1b-18df-557d9f970eb00-gzip"
vary: Accept-Encoding
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NSZgufXOBlefhjre9DOjeyUuvuWCMWjmt3irlbpjPOnDRBm0LGa8K%2FzX4bqQRQu0iKwiRU2a3dSqmRKjCV5Swz8JnwEs08A9IeH2wdeTlt3tKpQnQgQKWtTnBkGWcXIcw4iEedE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75d5576fca150b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js | 104.17.25.14 | 200 OK | 4.5 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.10/jquery.mask.js IP104.17.25.14:0
Hashe40e054c5726f042bad463e3774a2777 5c9413b72837a440b327444104830c35ae3b052c fcc8a86d2e89e8fbe9815d50c23bf205191ab8a6c0bec67358cd975d94283ff8
GET /ajax/libs/jquery.mask/1.14.10/jquery.mask.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 4517
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-4e98"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 111646
expires: Tue, 10 Oct 2023 22:55:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TB0tMcMn%2Fw%2BPfpFai8TBmJsXLpe1WB9KlTPWRAS6lY4Rf3SenEz6xRK9TCfo89o6WIeM3NAax%2B94U%2FUZFompJ2sD4foO639dFvI%2FGrCd27yf1NA3IBbR9HViTi5wZwTho0WjftN1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75d557702e31b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashf8d99fcb1c8868cf12abe2d17e3be6ef e1b2089de3499aa7199dec670ccdf8d908f1ebdb e5ef2b09686fb53ee4aa0dad4ff38e7707a54f255a7a0d210ca262b7ac12fa4b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6586
Cache-Control: max-age=166756
Content-Type: application/ocsp-response
Date: Thu, 20 Oct 2022 22:55:31 GMT
Etag: "6351a08d-117"
Expires: Sat, 22 Oct 2022 21:14:47 GMT
Last-Modified: Thu, 20 Oct 2022 19:25:01 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
|
|
| englishzone.com.br/qq/img/background.desktop.3.jpeg | 172.67.160.188 | 200 OK | 450 kB |
URL HTTP/2englishzone.com.br/qq/img/background.desktop.3.jpeg IP172.67.160.188:0
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1079, components 3\012- data Size450 kB (450313 bytes) Hash094edb0780b5c0d458a26324ef1b632d 355994692e46e39ae3685d56d9bc632609ac22dd 61227c65741c9b49fb0e7263ec183499d20baef2caa9bea8582845864a49010a
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /qq/img/background.desktop.3.jpeg HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: image/jpeg
content-length: 450313
last-modified: Wed, 22 Sep 2021 18:43:42 GMT
etag: "701b9d-6df09-5cc99e4aa9380"
cache-control: max-age=28800
cf-cache-status: HIT
age: 7321
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CEzt8v8YTFBDVhYC34bR2q3vYh7Q%2BYuePeo5urri7Cr91K9Yzf8EP95QJHnHSUpjk6JkyBU%2BzxmbwAuPH0AHtBiSRcX7VH2sQ2qUv1htHBr5t5RT%2Ffz9IAs%2FLhAaxobkKkTRG7k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75d557707a6c0b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/css/lostyle.css | 172.67.160.188 | 200 OK | 87 kB |
URL HTTP/2englishzone.com.br/qq/css/lostyle.css IP172.67.160.188:0
File typeASCII text, with CRLF line terminators Hash131a6133bdff64cda5c36389ad99c4c7 94b0da41582cd5fe78e1fa7c99a7f8c4136e3816 c7a5c3f6e0b42d6048da1cdab78ea0edefd772222144c1980097ff60d7d920de
GET /qq/css/lostyle.css HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: text/css
last-modified: Thu, 09 Apr 2020 00:00:34 GMT
etag: W/"701207-1cf1f-5a2d04e4b2c80-gzip"
vary: Accept-Encoding
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rDbdqqqNnBvoypz1sl%2BL8RvCzADKhGowBG%2BwJvouW4JrdPboAUWywqRRcyUFKV%2FFiJWlU1hoCEc02qPceWq9CiPv8af99BcK4%2FWqrkZ78260wSgxs8S9uC21JMJCKkPLEZ5F8uU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75d5576fba020b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/img/logo.svg | 172.67.160.188 | 200 OK | 26 kB |
URL HTTP/2englishzone.com.br/qq/img/logo.svg IP172.67.160.188:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text Hash6c25fcf86fdef24a302880603965d16c 66e85f8788185589aa6961a5a9186f5182efc10c 8fe380fd3b402cc00d865b6f62383898bb56c154a1cafcf913619be80265fd2c
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /qq/img/logo.svg HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/css/lostyle.css
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: image/svg+xml
last-modified: Fri, 03 Apr 2020 23:54:14 GMT
etag: W/"701c0d-581-5a26ba26ff580"
vary: Accept-Encoding
cache-control: max-age=28800
cf-cache-status: HIT
age: 8239
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O3FKlq%2FX18riCc1bzNPakFoXPkPqPjzl4Pq4mIcaeUl86AhsAdl2AMiKL9JtdEPGBVW1VJi1Aj4PEtRKxzRVTe2TjZOUuLIZSCedxgf4JSKUzOLVTo2i0ZpeS3yIvAbeUNLKZeQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75d557707a6a0b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.27 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.27:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 20 Oct 2022 22:43:40 GMT
Cache-Control: max-age=3600
Expires: Thu, 20 Oct 2022 22:44:40 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: frSWRcFgszFn_PFOTrMwc2ewFHIrCI6Qm7oVUEGrp1YELmEnN7QvXg==
Age: 712
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hasha5dd4f71f4ddd5be9201466ed7a6c423 1d0832fb6e227d42137d319f728c8bc1414c816f 1edffa6a320210fccbd0e5fa6dbdaa45561678a75a66639985f02791c8283b40
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4950
Cache-Control: max-age=124424
Content-Type: application/ocsp-response
Date: Thu, 20 Oct 2022 22:55:32 GMT
Etag: "63510196-1d7"
Expires: Sat, 22 Oct 2022 09:29:16 GMT
Last-Modified: Thu, 20 Oct 2022 08:06:46 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 44.238.3.246 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP44.238.3.246:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qYTqJ7HvFzjEbs0SXTjwvQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: xSiu2E0XVpqQ78zhbBufW2iTl4A=
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash56aa4d33e288d7ec3acf3ac1a61ef7f9 ac2e2f3609cc604dde554e37471567c042bf8191 544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9277
Expires: Fri, 21 Oct 2022 01:30:10 GMT
Date: Thu, 20 Oct 2022 22:55:33 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash56aa4d33e288d7ec3acf3ac1a61ef7f9 ac2e2f3609cc604dde554e37471567c042bf8191 544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9277
Expires: Fri, 21 Oct 2022 01:30:10 GMT
Date: Thu, 20 Oct 2022 22:55:33 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash56aa4d33e288d7ec3acf3ac1a61ef7f9 ac2e2f3609cc604dde554e37471567c042bf8191 544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9277
Expires: Fri, 21 Oct 2022 01:30:10 GMT
Date: Thu, 20 Oct 2022 22:55:33 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash56aa4d33e288d7ec3acf3ac1a61ef7f9 ac2e2f3609cc604dde554e37471567c042bf8191 544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9277
Expires: Fri, 21 Oct 2022 01:30:10 GMT
Date: Thu, 20 Oct 2022 22:55:33 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e685c21-7211-40e0-9804-0adc3c6df2e8.jpeg | 34.120.237.76 | 200 OK | 8.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e685c21-7211-40e0-9804-0adc3c6df2e8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4369f26458999683a52b7b15a38df1e3 ca5d926852bbc7f3d83125a84aaea41cdef59e46 d261de1344108c82935c0d204946bfc214da20961154f1965581bca9030337a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e685c21-7211-40e0-9804-0adc3c6df2e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8081
x-amzn-requestid: f3a5c233-5e9f-419c-9e7f-745921855824
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUr-TGL-oAMFyvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c05b-16ad6d032373cf35545af9a9;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:40:43 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9meMbzFuN09ykVPGtZUcqH1Zo7zcDKLuelp0DLjLIlbIHm6J28owPg==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 21:50:08 GMT
age: 3925
etag: "ca5d926852bbc7f3d83125a84aaea41cdef59e46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bade1dd-24b1-4bae-9ace-a120c6729946.jpeg | 34.120.237.76 | 200 OK | 2.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bade1dd-24b1-4bae-9ace-a120c6729946.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash76fdbaaa2ef28349492bdf0e44fa1208 6769eeb6762a3dd7dacf6a054fedf043acb463df 8c8b2db96e764f97aa91bd800b2a6f7bf6c9d96a9dd67f919f27b53074e339e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bade1dd-24b1-4bae-9ace-a120c6729946.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2305
x-amzn-requestid: d44cceea-ab77-400f-a7a6-ed80b9873106
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aE95TG2YoAMFiiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634b76a1-57ed4d9437044cc1665e535b;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 03:12:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: AsSDzjeB5RvDY9ZCxMe-b1bTQiQI6r2yB-PPBo9Qap4hWMINj4wmSA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 10:13:37 GMT
age: 45716
etag: "6769eeb6762a3dd7dacf6a054fedf043acb463df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e577f39-aa15-4065-b955-f3cf59e0a65f.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e577f39-aa15-4065-b955-f3cf59e0a65f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2700a9d3641a903962e653eb6f97f058 42fcdd8866af4012a37c9e929feab11217af97cc c983878fab0833edf963ef4120013c72b8df018bc860c926f558a313268bf3ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e577f39-aa15-4065-b955-f3cf59e0a65f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11020
x-amzn-requestid: 39112660-41c4-4058-8db4-19763c39f6eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUr--FAVIAMFmHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c05f-7a1d5cbb236c8a2d262d83d6;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:40:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: apgmm6HH8_3W2Z8GZ1ulJIwRzkWApGHZXgW_zsIIC7npDHsw7c4ttg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 22:17:23 GMT
age: 2290
etag: "42fcdd8866af4012a37c9e929feab11217af97cc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e67413c-6e4d-487c-807f-ff21a90aa792.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e67413c-6e4d-487c-807f-ff21a90aa792.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash00f8ff57c0d15e1ce75a788b91dc0bd3 46445de659e1aa0623c7666c98b5f642ffeff89d 95eb2c3d2ab4643affffd59887814a013edacba9f73c633399905d9d0d397b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e67413c-6e4d-487c-807f-ff21a90aa792.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10799
x-amzn-requestid: 9b27131b-a0ca-426d-939c-78de0beac51c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUsKLF9hIAMF97g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c0a7-76bf3c356f04a6a672e2f7a1;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:41:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 96xd1B3QDqywkAxLGVMbF6P4UJ_gweEBpEc8fcCwUzVhTG6GWA66FA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 21:50:08 GMT
age: 3925
etag: "46445de659e1aa0623c7666c98b5f642ffeff89d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe88fd32b-e32c-4e05-ba5d-ff09e2d25456.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe88fd32b-e32c-4e05-ba5d-ff09e2d25456.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha13890c0ba208ebf4d34e326985b04ed 3fb08432bde3f01162ba0ca8b83680ad5f9b3af0 a83d2360a7a62f466c373b4d848acbd257473ae24dd5deb6dadac1368973995b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe88fd32b-e32c-4e05-ba5d-ff09e2d25456.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11885
x-amzn-requestid: 7ea21866-c9b7-4e5e-897a-03bd6937e014
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z-WYqHBWIAMFfyw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6348d104-4791bb044f3149e814c30161;Sampled=0
x-amzn-remapped-date: Fri, 14 Oct 2022 03:01:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rSzRDw7IE4vOY43eAuWGOY7FaPjpXsi4SjAf9fKx41vxhxWX85zeCw==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 22:38:01 GMT
age: 1052
etag: "3fb08432bde3f01162ba0ca8b83680ad5f9b3af0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0f39369-b0de-4f1a-a265-fb5b78bd72bb.jpeg | 34.120.237.76 | 200 OK | 8.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0f39369-b0de-4f1a-a265-fb5b78bd72bb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9092a9add4d42e5bd0fd11c1459b5c69 4055fbef2d5d4e27a1d88ee293552f7742914390 b07359415e41671b4eb74c0d253d36f99bd2b40f6223bf4915bb11d2086af571
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0f39369-b0de-4f1a-a265-fb5b78bd72bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8859
x-amzn-requestid: 8ecd9a22-fe28-487d-b01a-a818eb874d6d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUsQ9Es8oAMFiVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c0d2-6cd9f84f1fe795e5758d2527;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:42:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fdnNzqN_Gw5Ysi3SdxOkqc2GfZwR3ORbXsjy64hkcxXhSWx8MpHaOw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 20 Oct 2022 21:50:24 GMT
age: 3909
etag: "4055fbef2d5d4e27a1d88ee293552f7742914390"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/css/style.css | 172.67.160.188 | 200 OK | 0 B |
URL HTTP/2englishzone.com.br/qq/css/style.css IP172.67.160.188:0
GET /qq/css/style.css HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: text/css
last-modified: Sat, 04 Apr 2020 00:40:52 GMT
etag: W/"70123e-97157-5a26c49360d00-gzip"
vary: Accept-Encoding
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZpVIFTLlURHf25JrH6id448i5hYJGJ2Ya0PTisXYTHs0ujvWUoaXcJ0%2BlK1MygTvjSHvh%2BVf%2FzLybvsfnMS%2BvMzbfVth87vGS7x19vJrvt4L0fPpPRGpsqzeyX%2F5l2HHcPQkLKw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75d5576fba010b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/js/jquery.validate.min.js | 172.67.160.188 | 200 OK | 0 B |
URL HTTP/2englishzone.com.br/qq/js/jquery.validate.min.js IP172.67.160.188:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /qq/js/jquery.validate.min.js HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: application/javascript
last-modified: Sat, 11 Aug 2018 16:12:40 GMT
etag: W/"701c1e-8687-5732b211eae00-gzip"
vary: Accept-Encoding
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nc6g0PRu1iCerWXKgprzTqRnG3DEIlb5E%2FhTo8NXpJ52nyzI5l3mOuwE1QHzBWAPr52hTvrbWbo3vszXLs0LGxAbPHIkO00yfySIzigtJc8wBowczoCgq9n97ONyzO9x3KcUiCU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75d5576fca140b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/js/jquery.min.js | 172.67.160.188 | 200 OK | 0 B |
URL HTTP/2englishzone.com.br/qq/js/jquery.min.js IP172.67.160.188:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /qq/js/jquery.min.js HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: application/javascript
last-modified: Fri, 17 Apr 2020 11:17:40 GMT
etag: W/"701c1c-26f32-5a37ab285bd00-gzip"
vary: Accept-Encoding
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xeUNoQzpTQ7sufmzZpqNXwKRpb5TrIZbFy2KbecLQNOWDeue2mIBr%2FyGRBuy0WDLsTkPP5km8THSMPcmzGfb67DF783McA8jZ4KtzutGtwvt7y1mm%2FoQYlpaEpsT3YXsyeXHosk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75d5576fca110b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/js/jquery.player.js | 172.67.160.188 | 200 OK | 0 B |
URL HTTP/2englishzone.com.br/qq/js/jquery.player.js IP172.67.160.188:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /qq/js/jquery.player.js HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg
Cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: application/javascript
last-modified: Fri, 24 Sep 2021 19:01:06 GMT
etag: W/"701c1d-c52a-5ccc25e938080-gzip"
vary: Accept-Encoding
cache-control: max-age=28800
cf-cache-status: HIT
age: 8240
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j9SIopxr5fiwlx3ndu6ZeXfd46Mnky4C5mhtccWpuaugu39WTacFXOpl5YQEeflqwCVujbG%2FTOzES%2FsVD2j%2BlWBmbTP%2F9jaXK58Pvp3Xoq2mdTKrpet1j0EpJ22DgorP3YIR0Rk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75d5576fca160b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg | 172.67.160.188 | 200 OK | 0 B |
URL HTTP/2englishzone.com.br/qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg IP172.67.160.188:0
GET /qq/auth.php?md=vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg&vbhlgeilfvawyuckfnsg HTTP/1.1
Host: englishzone.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 20 Oct 2022 22:55:31 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.1.11
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=bsun77a2a3in2oabqd1b21741g; path=/
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0DOhAmIajiLeBsdM8uMXqk0YA4hmU63IAt%2B7dgvP88jHuAnETjjD3Z1tZJwS%2B9Ta21T1NEb2L1N9eMdgDtUQrH%2FkANE9WO2uDG%2B4%2BSjJOdBtuP9FtC5bmX9Mt615VUxDbqngwto%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75d5576d785c0b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|