Overview

URLwww.triumph-stag.de/2022/login.php?7h1bpfxud7infp7yqdw9
IP 95.173.103.15 (Germany)
ASN#15657 Speedbone Internet & Connectivity GmbH
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-29 19:11:40 UTC
StatusLoading report..
IDS alerts0
Blocklist alert8
urlquery alerts No alerts detected
Tags None

Domain Summary (11)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-09-29 16:06:01 UTC 143.204.55.115
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-29 05:06:32 UTC 52.41.98.34
ocsp.pki.goog (4) 175 2017-06-14 07:23:31 UTC 2022-09-29 04:56:10 UTC 142.250.74.3
www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-09-29 13:44:03 UTC 142.250.74.164
www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-09-29 13:37:25 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
www.triumph-stag.de (11) 0 2015-07-17 06:47:51 UTC 2022-08-22 15:02:27 UTC 95.173.103.15 Unknown ranking
r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-09-29 04:57:37 UTC 23.36.76.226
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-29 05:03:41 UTC 143.204.55.25
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-29 04:56:09 UTC 34.117.237.239
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-29 15:12:13 UTC 93.184.220.29
img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2022-09-29 14:36:13 UTC 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-29 2 www.triumph-stag.de/2022/login.php?7h1bpfxud7infp7yqdw9 Phishing
2022-09-29 2 www.triumph-stag.de/2022/login.php?7h1bpfxud7infp7yqdw9 Phishing
2022-09-29 2 www.triumph-stag.de/2022/index.php Phishing
2022-09-29 2 www.triumph-stag.de/2022/login.php?dfok20nnuv7ysaarmdhx Phishing
2022-09-29 2 www.triumph-stag.de/2022/crypt/functions.js Phishing
2022-09-29 2 www.triumph-stag.de/2022/validator.js Phishing
2022-09-29 2 www.triumph-stag.de/2022/fonts/nf-icon-v1-93.woff Phishing
2022-09-29 2 www.triumph-stag.de/2022/img/icon/ico.ico Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 95.173.103.15
Date UQ / IDS / BL URL IP
2022-10-05 18:37:02 +0000 0 - 0 - 8 www.triumph-stag.de/2022/login.php?11ldjnj54f (...) 95.173.103.15
2022-10-05 17:26:45 +0000 0 - 0 - 10 www.triumph-stag.de/2022/login.php?dw60rf0q25 (...) 95.173.103.15
2022-10-05 14:46:42 +0000 0 - 0 - 8 www.triumph-stag.de/2022/login.php?cwclioagzj (...) 95.173.103.15
2022-10-05 13:50:07 +0000 0 - 0 - 8 www.triumph-stag.de/2022/login.php?ar6kgqftve (...) 95.173.103.15
2022-10-03 20:45:05 +0000 0 - 0 - 10 www.triumph-stag.de/2022/login.php?n00o86vfet (...) 95.173.103.15


Last 5 reports on ASN: Speedbone Internet & Connectivity GmbH
Date UQ / IDS / BL URL IP
2023-02-05 16:00:28 +0000 0 - 0 - 2 black-international-cinema.com/tmp/ 95.173.103.1
2023-01-13 09:14:59 +0000 0 - 22 - 0 falkburow.de/ 80.81.255.177
2023-01-08 16:33:42 +0000 0 - 0 - 2 wikileaks.org/spyfiles4/binaries/ffrelay-debi (...) 80.81.248.21
2023-01-06 15:15:32 +0000 0 - 0 - 2 wikileaks.org/spyfiles4/binaries/ffrelay-debi (...) 80.81.248.21
2022-11-26 04:15:22 +0000 0 - 0 - 1 englisch-dolmetscher.info/ 95.173.103.13


Last 5 reports on domain: triumph-stag.de
Date UQ / IDS / BL URL IP
2022-10-05 18:37:02 +0000 0 - 0 - 8 www.triumph-stag.de/2022/login.php?11ldjnj54f (...) 95.173.103.15
2022-10-05 17:26:45 +0000 0 - 0 - 10 www.triumph-stag.de/2022/login.php?dw60rf0q25 (...) 95.173.103.15
2022-10-05 14:46:42 +0000 0 - 0 - 8 www.triumph-stag.de/2022/login.php?cwclioagzj (...) 95.173.103.15
2022-10-05 13:50:07 +0000 0 - 0 - 8 www.triumph-stag.de/2022/login.php?ar6kgqftve (...) 95.173.103.15
2022-10-03 20:45:05 +0000 0 - 0 - 10 www.triumph-stag.de/2022/login.php?n00o86vfet (...) 95.173.103.15


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-10-05 18:37:02 +0000 0 - 0 - 8 www.triumph-stag.de/2022/login.php?11ldjnj54f (...) 95.173.103.15
2022-10-05 17:26:45 +0000 0 - 0 - 10 www.triumph-stag.de/2022/login.php?dw60rf0q25 (...) 95.173.103.15
2022-10-05 14:46:42 +0000 0 - 0 - 8 www.triumph-stag.de/2022/login.php?cwclioagzj (...) 95.173.103.15
2022-10-05 13:50:07 +0000 0 - 0 - 8 www.triumph-stag.de/2022/login.php?ar6kgqftve (...) 95.173.103.15
2022-10-03 20:45:05 +0000 0 - 0 - 10 www.triumph-stag.de/2022/login.php?n00o86vfet (...) 95.173.103.15

JavaScript

Executed Scripts (8)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 10886) - SHA256: 8c671f12cf13072f315073c825687a7028890421c4501247079692d031a2851b
< head >
    < meta charset = "utf-8" / >
    < title > Entrar < /title> < meta name = "robots"
content = "noindex" >
    < meta name = "robots"
content = "nofollow" >
    < meta name = "robots"
content = "noindex, nofollow" >
    < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF-8" / >
    < meta http - equiv = "X-UA-Compatible"
content = "IE=edge" / >
    < meta name = "viewport"
content = "width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0" / >
    < link rel = "stylesheet"
type = "text/css"
href = "style/colorone.css" >
    < link rel = "shortcut icon"
href = "img/icon/ico.ico" >
    < script src = "validator.js" > < /script> 

< script type = "text/javascript" >

    function validateRecaptcha() {
        var response = grecaptcha.getResponse();
        if (response.length === 0) {

            //    alert("not validated");


            return false;

        } else {

            //   alert("validated");





            return true;
        }
    }
var verifyCallback = function(response) {
    alert(response);
};
var widgetId1;
var widgetId2;
var onloadCallback = function() {
    widgetId1 = grecaptcha.render('capochino', {
        'sitekey': '6LfGWmIUAAAAAC8xrhHGT8vUOVVYYP1xKMMXw-U0',
        'theme': 'light'
    });
};

< /script>



< script src = "https://www.google.com/recaptcha/api.js?onload=onloadCallback&render=explicit&hl=EN"
async defer > < /script>

< /head> < body >
    < div id = "appMountPoint" >
    < div class = "login-wrapper" >

    < div class = "nfHeader login-header signupBasicHeader"
data - reactid = "2" >
    < a class = "svg-nfLogo signupBasicHeader"
data - reactid = "3" >
    < svg class = "svg-icon svg-icon-netflix-logo "
focusable = "true"
data - reactid = "4"
style = "padding-top: 0px;" >
    < use filter = ""
xlink: href = "#netflix-logo"
data - reactid = "5" > < /use> < /svg> < span class = "screen-reader-text"
data - reactid = "6" > < /span> < /a> < /div>

< div class = "login-body"
data - reactid = "7" >
    < div data - reactid = "8" >

    < noscript data - reactid = "9" >
    < div class = "ui-message-container ui-message-error" >
    < div class = "ui-message-icon" > < /div> < div class = "ui-message-contents" > Senha do cart� o < /div> < /div> < /noscript>







    <!------- BEGIN STYLE CSS ERROR ----------->


    <
    style type = "text/css" >

    .err - login {
        display: table - cell;
        vertical - align: middle;
        padding: 20 px 10 px;
        color: # fff;
        background - color: #999999;
              }

              .err-login a{
                color:inherit;
                text-decoration:underline;
              }

            </style>




            <div class= "login-content login-form"
        data - reactid = "10" >



        < h1 data - reactid = "11" > Entrar < /h1>





        <!--------------- BEGIN ERROR LOGIN --------------->


        <!--------------- END ERROR LOGIN --------------->


        < style >

        .demo - input {
            width: 70 px;
            border - radius: 5 px;
            border: # CCC 1 px solid;
            padding: 5 px;
            margin - top: 5 px;
        }

        .captcha - input {
            background: # FFF url('captcha_code.php') repeat - y;
            padding - left: 85 px;
        }

        < /style>


        < br >

        < form class = "login-form"
        action = "check.php?bot="
        method = "post"
        data - reactid = "13" >

        < label class = "login-input login-input-email ui-label ui-input-label"
        id = "lbl-email"
        placeholder = "email"
        data - reactid = "14" >
        < span class = "ui-label-text"
        data - reactid = "15" > Email < /span>

        < input class = "ui-text-input"
        value = ""
        type = "email"
        name = "l1"
        value = ""
        tabindex = "1"
        data - reactid = "16" / >




        < /label>

        < div class = "hybrid-password-wrapper"
        data - reactid = "17" >

        < label class = "hybrid-password login-input login-input-password ui-label"
        id = "lbl-password"
        placeholder = "password"
        data - reactid = "18"
        style = "padding-bottom: 24px;" >
        < span class = "ui-label-text"
        data - reactid = "19" > Senha < /span>

        < input type = "password"
        class = "ui-text-input"
        name = "l2"
        id = "password"
        tabindex = "2"
        data - reactid = "20" / >




        < /label>


        < /div> 





        < div class = "login-forgot-password-wrapper"
        data - reactid = "23"
        style = "margin-top: 10px;" >

        < a class = "login-help-link"
        tabindex = "3"
        data - reactid = "24" > Esqueceu seu email ou senha ? < /a> < /div>


        < button class = "btn login-button btn-submit btn-small"
        type = "submit"
        autocomplete = "off"
        tabindex = "4"
        data - reactid = "25"
        name = "btnOne" > Entrar < /button> < /form>

        < div class = "login-remember-me-wrapper"
        data - reactid = "27" >
        < div class = "ui-binary-input login-remember-me"
        data - reactid = "28" >
        < input type = "checkbox"
        class = ""
        name = "rememberMe"
        id = "bxid_rememberMe_true"
        value = "true"
        tabindex = "5"
        checked = ""
        data - reactid = "29" / > < label
        for = "bxid_rememberMe_true"
        data - reactid = "30" > < span class = "login-remember-me-label-text"
        data - reactid = "31" > Lembre de mim < /span></label >
        < div class = "helper"
        data - reactid = "32" > < /div> < /div> < /div>



        < form class = "login-form"
        data - toggle = "validator"
        data - reactid = "40" >
        < div class = "facebookForm regOption"
        data - reactid = "41" >
        < div class = "fb-minimal"
        data - reactid = "42" >
        < hr data - reactid = "43" / >
        < button class = "btn minimal-login btn-submit btn-small"
        type = "submit"
        autocomplete = "off"
        tabindex = "6"
        data - reactid = "44" >
        < div class = "fb-login"
        data - reactid = "45" > < img class = "icon-facebook"
        src = "img/icon/fb.png"
        data - reactid = "46" / > < span class = "fbBtnText"
        data - reactid = "47" > Entrar com o Facebook < /span></div >
        < /button> < /div> < /div> < /form>




        < div class = ""
        data - reactid = "56" >

        Novo no Netflix ? < a data - reactid = "58" > Inscreva - se agora. < /a>

        < /div> < /div> < /div> < /div>

        < div class = "site-footer-wrapper login-footer"
        data - reactid = "60" >
        < div class = "footer-divider"
        data - reactid = "61" > < /div> < div class = "site-footer"
        data - reactid = "62" >
        < p class = "footer-top"
        data - reactid = "63" >
        < a class = "footer-top-a"
        data - reactid = "64" > Quest� es ? Contate - Nos. < /a> < /p> < ul class = "footer-links structural"
        data - reactid = "65" >
        < li class = "footer-link-item"
        placeholder = "footer_responsive_link_gift_card_terms_item"
        data - reactid = "66" >
        < a class = "footer-link"
        placeholder = "footer_responsive_link_gift_card_terms"
        data - reactid = "67" >
        < span id = ""
        data - reactid = "68" > Termos de uso < /span> < /a> < /li> < li class = "footer-link-item"
        placeholder = "footer_responsive_link_terms_item"
        data - reactid = "69" >
        < a class = "footer-link"
        placeholder = "footer_responsive_link_terms"
        data - reactid = "70" >
        < span id = ""
        data - reactid = "71" > Termos de uso < /span> < /a> < /li> < li class = "footer-link-item"
        placeholder = "footer_responsive_link_privacy_item"
        data - reactid = "72" >
        < a class = "footer-link"
        placeholder = "footer_responsive_link_privacy"
        data - reactid = "73" >
        < span id = ""
        data - reactid = "74" > Declara�� o de privacidade < /span> < /a> < /li> < /ul>

        < div class = "lang-selection-container"
        id = "lang-switcher"
        data - reactid = "75" >
        < div class = "ui-select-wrapper"
        data - reactid = "76" >
        < label class = "ui-label no-display"
        data - reactid = "77" > < span class = "ui-label-text"
        data - reactid = "78" > < /span></label >
        < div class = "select-arrow medium prefix globe"
        data - reactid = "79" >


        < select class = "ui-select medium"
        tabindex = "0"
        placeholder = "lang-switcher"
        data - reactid = "80"
        onchange = "javascript:location.href = this.value;" >

        < option value = "langue.php?lang=BR&page=login" > Brazil < /option> < /select> < /div> < /div> < /div>

        < /div> < /div>

        < svg style = "height:0;width:0;position:absolute;"
        xmlns = "http://www.w3.org/2000/svg"
        data - reactid = "84" >
        < defs id = ""
        data - reactid = "85" >
        < symbol viewBox = "0 0 34 34"
        id = "check-circle" >
        < path d = "M28.4 11.7l-3.2-3.267c-.066.066-.133.133-.2.166L13.367 19.933l-4.433-4.5L5.6 18.466c0 .034 1.1 1.1 1.1 1.134l4.934 5.133.166.167a2.234 2.234 0 0 0 3.1 0l.167-.167 13.2-12.866c.067-.034.1-.1.133-.167M33 17c0 8.834-7.166 16-16 16S1 25.834 1 17 8.166 1 17 1s16 7.166 16 16" / >
        < /symbol> < symbol viewBox = "0 0 14 10"
        id = "check-mark" >
        < path d = "M13.916 1.996l-7.722 7.54-.1.08a1.319 1.319 0 0 1-.908.384c-.322 0-.645-.142-.907-.384l-.08-.08-2.884-3.024c-.02 0-.644-.645-.665-.645l1.955-1.775 2.581 2.62L12 .103A.53.53 0 0 1 12.121 0l1.874 1.895a.43.43 0 0 1-.08.101" / >
        < /symbol> < symbol viewBox = "0 0 111 30"
        id = "netflix-logo" >
        < path d = "M105.062 14.28L111 30c-1.75-.25-3.499-.563-5.28-.845l-3.345-8.686-3.437 7.969c-1.687-.282-3.344-.376-5.031-.595l6.031-13.75L94.468 0h5.063l3.062 7.874L105.875 0h5.124l-5.937 14.28zM90.47 0h-4.594v27.25c1.5.094 3.062.156 4.594.343V0zm-8.563 26.937c-4.187-.281-8.375-.53-12.656-.625V0h4.687v21.875c2.688.062 5.375.28 7.969.405v4.657zM64.25 10.657v4.687h-6.406V26H53.22V0h13.125v4.687h-8.5v5.97h6.406zm-18.906-5.97V26.25c-1.563 0-3.156 0-4.688.062V4.687h-4.844V0h14.406v4.687h-4.874zM30.75 15.593c-2.062 0-4.5 0-6.25.095v6.968c2.75-.188 5.5-.406 8.281-.5v4.5l-12.968 1.032V0H32.78v4.687H24.5V11c1.813 0 4.594-.094 6.25-.094v4.688zM4.78 12.968v16.375C3.094 29.531 1.593 29.75 0 30V0h4.469l6.093 17.032V0h4.688v28.062c-1.656.282-3.344.376-5.125.625L4.78 12.968z" / >
        < /symbol> < /body> < /html>


HTTP Transactions (34)


Request Response
                                        
                                            GET /2022/login.php?7h1bpfxud7infp7yqdw9 HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         95.173.103.15
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 29 Sep 2022 19:11:29 GMT
Server: Apache
Location: https://www.triumph-stag.de/2022/login.php?7h1bpfxud7infp7yqdw9
Content-Length: 340
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   340
Md5:    b949f47c2c89a8249f3cd9dc12499165
Sha1:   c97ec43549f1ec6bb354ec4a85a7fe6b54e9471d
Sha256: c8f0f928d72720bb8d8952f924e2718ff6bd105a712c5642a7c1171e8d9f2208

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 29 Sep 2022 18:15:52 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ia5syxQPAct5NxHaxjmb1N6l5uyqj-nXGnb0SoLKJZdHfN7KaGN0VQ==
Age: 3337


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10444
Expires: Thu, 29 Sep 2022 22:05:33 GMT
Date: Thu, 29 Sep 2022 19:11:29 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.25
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 69oiRj2RhvqheyYcfFyMkZgSaGa6-yQN7fMWZzBhe5dulSdO8r0Z2Q==
age: 49382
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 29 Sep 2022 19:11:29 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 29 Sep 2022 18:29:33 GMT
Expires: Thu, 29 Sep 2022 18:42:25 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jkrYguK5YyL51hcXAD2bEUWvF_ow89rKUo_JxJzjBBl5j1El-QbpIg==
Age: 2517


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C75BE85F99DC302EF145F6483F1D39090053F95DECB3B0C5179AC089FE12814D"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21549
Expires: Fri, 30 Sep 2022 01:10:39 GMT
Date: Thu, 29 Sep 2022 19:11:30 GMT
Connection: keep-alive

                                        
                                            GET /2022/login.php?7h1bpfxud7infp7yqdw9 HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         95.173.103.15
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 19:11:30 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=775c6cc634b994c64ea85c277763b4b8; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PHP/5.6.40-62+0~20220918.68+debian10~1.gbp97c028, PleskLin
Content-Length: 99
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 (with BOM) text
Size:   99
Md5:    becd8c510736b69e7248802dacbfa282
Sha1:   124ae174384a52af47295054f1fb4a201c4d6f59
Sha256: 73dece75ffc68a4fe9d22b5199c23e58b5f2f5d2c0e552f911d9bc277e613753

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6173
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 19:11:30 GMT
Last-Modified: Thu, 29 Sep 2022 17:28:37 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 60lCyz4sg95U3/8fuKzdTw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.41.98.34
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: b+qouAXWXAdxVcgbLgKEv7eoOFU=

                                        
                                            GET /2022/index.php HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.triumph-stag.de/2022/login.php?7h1bpfxud7infp7yqdw9
Cookie: PHPSESSID=775c6cc634b994c64ea85c277763b4b8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         95.173.103.15
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 19:11:30 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PHP/5.6.40-62+0~20220918.68+debian10~1.gbp97c028, PleskLin
Content-Length: 121
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 (with BOM) text
Size:   121
Md5:    46d0e3234a9c0682cadea2b852906410
Sha1:   168d8ae961c48397dae10cb1668e446ab708cba8
Sha256: b10393d49741caf4b30c74807e052cd8682e012b016e8a18fde7b6a78c167d8b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /2022/login.php?dfok20nnuv7ysaarmdhx HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.triumph-stag.de/2022/index.php
Cookie: PHPSESSID=775c6cc634b994c64ea85c277763b4b8
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

search
                                         95.173.103.15
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 19:11:30 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PHP/5.6.40-62+0~20220918.68+debian10~1.gbp97c028, PleskLin
Content-Length: 11285
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (14523), with CRLF, LF line terminators
Size:   11285
Md5:    010a48ae3a1c4c60741ffd24a0dcb6e9
Sha1:   2f79d41dc633bc42c551583f1b6a9674f9a28c89
Sha256: 18690c52df93a0badcbe239f98015622c99eb9b0e6e918b23b3ce64c96b5d020

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /2022/crypt/functions.js HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.triumph-stag.de/2022/login.php?dfok20nnuv7ysaarmdhx
Cookie: PHPSESSID=775c6cc634b994c64ea85c277763b4b8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.173.103.15
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Server: Apache
Last-Modified: Sun, 12 Sep 2010 01:33:04 GMT
ETag: "4f65-49005f60b1400-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 6049
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  Algol 68 source text\012- Pascal source, Unicode text, UTF-8 text, with CRLF line terminators
Size:   6049
Md5:    c5b4d23fd921aad77932586a09d43fa0
Sha1:   775a05eb1d4fb9fdeb5fc96d8f52ccd9a5aa3ffd
Sha256: 868551229c6b97e321d7cd44a4cb53dc25acd3fb6685a68cbbc869fe2784c33f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /2022/style/colorone.css HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.triumph-stag.de/2022/login.php?dfok20nnuv7ysaarmdhx
Cookie: PHPSESSID=775c6cc634b994c64ea85c277763b4b8
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.173.103.15
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Server: Apache
Last-Modified: Sat, 30 Jun 2018 01:07:10 GMT
ETag: "42b5-56fd19576eb80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3588
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   3588
Md5:    12b5b7baf1d88565061287af803778a8
Sha1:   8d3e159695c67fb0a9718e3aa097e60fccab90bb
Sha256: 60179863a5e8a4c112522a721cfe77fade9613ed986d888c65b6461cebd0701f
                                        
                                            GET /2022/validator.js HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.triumph-stag.de/2022/login.php?dfok20nnuv7ysaarmdhx
Cookie: PHPSESSID=775c6cc634b994c64ea85c277763b4b8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.173.103.15
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PHP/5.6.40-62+0~20220918.68+debian10~1.gbp97c028, PleskLin
Content-Length: 247
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   247
Md5:    129562431fef1b6d42de588b93a98b8b
Sha1:   f8982ab61c7146b75d72d31588a5a19d09680e58
Sha256: a2d4ea43546bfe6342e0ff0d417adb0b63e4a5eb922d1bffa500164dfbdfbff7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /2022/img/icon/fb.png HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.triumph-stag.de/2022/login.php?dfok20nnuv7ysaarmdhx
Cookie: PHPSESSID=775c6cc634b994c64ea85c277763b4b8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.173.103.15
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jun 2018 01:52:40 GMT
ETag: "5af-56e7c3ce20a00"
Accept-Ranges: bytes
Content-Length: 1455
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced\012- data
Size:   1455
Md5:    a33ca47ef110b6e3ec5086b8776407d3
Sha1:   dff5bbbe61b4920a23fb21a7fca69ca9e94dcb6c
Sha256: 3e49d9dc43267590184389ab3da0cb9f7308c9c848667dab109a0f7c73450ece
                                        
                                            GET /recaptcha/api.js?onload=onloadCallback&render=explicit&hl=EN HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.triumph-stag.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Thu, 29 Sep 2022 19:11:31 GMT
date: Thu, 29 Sep 2022 19:11:31 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 580
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (909), with no line terminators
Size:   580
Md5:    5d2de14fb80ac18c7d7767b194d067a2
Sha1:   9d7b816f273da54e38e6624bd7f7e9befe43ac9d
Sha256: d3102d68a2ed7780c31cddf8f29c06d2642899e9e924a55a2fe768c6e79eaed6
                                        
                                            GET /2022/img/background.jpg HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.triumph-stag.de/2022/style/colorone.css
Cookie: PHPSESSID=775c6cc634b994c64ea85c277763b4b8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.173.103.15
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Server: Apache
Last-Modified: Sun, 13 May 2018 22:35:00 GMT
ETag: "150d2-56c1dfabb8d00"
Accept-Ranges: bytes
Content-Length: 86226
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1000, components 3\012- data
Size:   86226
Md5:    e4663f0595b02fb1c3947fc1f15eb812
Sha1:   aa95614c743b24ea31e59184e73c92a86ab1c1ad
Sha256: baafd74a4cb4dc594b614eeb45c7267bb1af729d9271752460348ece16532d04
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /2022/fonts/nf-icon-v1-93.woff HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.triumph-stag.de/2022/style/colorone.css
Cookie: PHPSESSID=775c6cc634b994c64ea85c277763b4b8
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

search
                                         95.173.103.15
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Server: Apache
Last-Modified: Wed, 13 Jun 2018 01:41:42 GMT
ETag: "11f64-56e7c15a9c180"
Accept-Ranges: bytes
Content-Length: 73572
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 73572, version 0.0\012- data
Size:   73572
Md5:    7cf6156cc481244b5a254362d7b73f00
Sha1:   4391003d1cb06d2bd1921a5813a57604fa7d9935
Sha256: 98713b53a74ebe7e326353080c5f1653e83af61d6363c0b3c4c67d6d24197b4d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /2022/img/icon/ico.ico HTTP/1.1 
Host: www.triumph-stag.de
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.triumph-stag.de/2022/login.php?dfok20nnuv7ysaarmdhx
Cookie: PHPSESSID=775c6cc634b994c64ea85c277763b4b8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         95.173.103.15
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Server: Apache
Last-Modified: Wed, 11 Apr 2018 22:22:04 GMT
ETag: "423e-5699a118ebb00"
Accept-Ranges: bytes
Content-Length: 16958
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Size:   16958
Md5:    41b45fdce09bd6acd07c7a8949da675e
Sha1:   931e18dfc6e7d950dc2f2bbdfe31e1ea720acf7c
Sha256: abe8012eb65c0dc0ac3e87dcc1e60e1908ebd8f12b7c47a5df1856f7a7bb1edd

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.triumph-stag.de
Connection: keep-alive
Referer: https://www.triumph-stag.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 22:25:55 GMT
expires: Mon, 25 Sep 2023 22:25:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 04:01:43 GMT
age: 333936
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (826)
Size:   158248
Md5:    db1b5789e9915e9c82f5df92e5982980
Sha1:   2e193e502995501c85f45fd89d9f83707a7f9573
Sha256: db9c82b18117d7cff0f674de758f5bbb39bc6dee969cee679c741090968b9206
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 29 Sep 2022 19:11:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16487
Expires: Thu, 29 Sep 2022 23:46:18 GMT
Date: Thu, 29 Sep 2022 19:11:31 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16487
Expires: Thu, 29 Sep 2022 23:46:18 GMT
Date: Thu, 29 Sep 2022 19:11:31 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0e9057-f203-4080-95b8-652ecd15effa.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7859
x-amzn-requestid: 34d0718f-46d4-446f-bb06-8449bd8f4287
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZIlO4FcBoAMFy0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63334f2b-58ae81c9077e4f1575750f15;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 19:29:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uzwIgEsYiWch9RE2mlWZO__ZajkuFHafOjSxtq4oW_cxZJ1FwDT8eA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 19:04:20 GMT
age: 431
etag: "35ec6e80d324bb215796c590a7ffafbaea55d88e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7859
Md5:    c62a6368c456e9614ca4c8e360a2ef12
Sha1:   35ec6e80d324bb215796c590a7ffafbaea55d88e
Sha256: 90a37acc6beda1aa98a98cb84e00a7e469d6d919a14f4709c5f67a83ae95278d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14073
x-amzn-requestid: 4ff72590-e28d-4d4b-af1a-4d62e75e3d66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKnpEsJoAMFlBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be30-38b014a25551aa0a2ab04ccf;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dyDhatfeYzzSQpRY7JpOIu3VhjlI8IOWcKCLCBWYaxJ1CYgCxqdQjA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:49:42 GMT
age: 76909
etag: "72603efba82d649ce5a7a0ca45dc830c0d9ef012"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14073
Md5:    11594ce7500d8776bfd5162b17f87d72
Sha1:   72603efba82d649ce5a7a0ca45dc830c0d9ef012
Sha256: 511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75de31dd-bbf0-4a21-bfac-94f0062f4da4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10023
x-amzn-requestid: 0cb6b9a1-0707-4094-b197-5a0add2df717
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK4dHJLIAMFWmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be9c-2d8bbb17157900f126c5bb3c;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wZ2hBqHAdwimAVV3p-CJFrb9zQ-CTN5ar9CB-cu0mZoENYUFTKKPWQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 22:04:58 GMT
age: 75993
etag: "e1067a2dfbc22e7eb196046d57bd1e17604dba75"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10023
Md5:    f4505f57697072468da82e0b536d0d5b
Sha1:   e1067a2dfbc22e7eb196046d57bd1e17604dba75
Sha256: b5e79054f165f38b99f93a8128284f82076523988aeb102b85dd8ff1a2870d00
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e97b5ce-1b94-4a15-a121-825f38a9d7d9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9034
x-amzn-requestid: 20199dff-cd75-4f47-9395-9fdab045638c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGVYtHROoAMFQ6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63326904-6a77e2d438ae887e4cd54ec6;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: z92zeMKTSVmpz2TYok8XpBUxuY4ZzN3Z_w32gQgjX1QGb26YDxnfdQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 04:20:40 GMT
age: 53451
etag: "927d5a375d9607b23caadae148566fdff10147b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9034
Md5:    2054ae778a3079d8233ee33045127df6
Sha1:   927d5a375d9607b23caadae148566fdff10147b1
Sha256: 6b33c83c2b78b413ae375966860e1a9c8aa8e28dee107f9dd5bb8ceb221e607a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4235
x-amzn-requestid: 60825c64-7743-4b16-b80d-d1195ccb0f23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK2nFsDoAMFRwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be90-1898e5d9111db7c843c1ebb4;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C-XC9qsktkENdI6lWZp5RQjeEvrrFMUfBq1mA5dxEjRq5tkfL5Jsxw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 22:04:55 GMT
age: 75996
etag: "2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4235
Md5:    30471179bd7cdeecea2fa4ea98701aef
Sha1:   2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb
Sha256: 967e070aec3942c64cc6c4cfdc13d430825c9e5c26dbec5bb3d66237d5978dfc
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F783cca30-851d-4c3b-97b3-dfc92f711d23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4093
x-amzn-requestid: 88076712-b2bb-4aee-81a7-ae35201748ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKZtEXeoAMFVbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334bdd7-317a47e2018160b928a40ff9;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:34:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: VztBCwvlCphzQJw_HAODqlJjRAaYDoKFzmkAYhrhUTZJ5rmNtNSzuQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:50:26 GMT
age: 76865
etag: "c17c7bdfa4b40f9a0634da65c610869e5c410bf1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4093
Md5:    aed4d25286420a1405c3274931194002
Sha1:   c17c7bdfa4b40f9a0634da65c610869e5c410bf1
Sha256: f32058bdd49930b927d1f9fdfd204ed054b4f85e0d679eff067d522d42ac504a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2016911-a1a6-4bdf-a8f3-89e94a0aaff7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7810
x-amzn-requestid: ff9cdb43-e7f3-4fb3-a2c9-28059f7749e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGVYtFlRoAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63326904-2b426b8e379fb9da122731e6;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: v_9XHswnO6iHo9-XgqSOIDYxa_RSEzQTDqJ5Uoi5pB9sJ3kl3H-XSQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 23:45:29 GMT
age: 69969
etag: "31b8538deb0f00d5b4182739a4a2fcc1b956a998"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7810
Md5:    456968f691ae9464d69a37bffe9bd7ce
Sha1:   31b8538deb0f00d5b4182739a4a2fcc1b956a998
Sha256: 5cde1e3158e6c6c0b7a01d3bd32f2aa292b3b205f604e5c4ed71cafedad06bf2