zone-telechargement-albums.com/pwd.php?id=1454518356
200 OK 4.2 kB URL HTTP/1.1 zone-telechargement-albums.com/pwd.php?id=1454518356
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash c7c1ff814427cc70e61b04d4c1986aff
8f48e20e0996016b0dedd88e50d87680eb72c3d9
c6485ec0499e4fcab69076d87cfb21f92d6bc26078366e5e0f04a82ddb050408
GET /pwd.php?id=1454518356 HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 19:55:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IyK0t%2BWXXf7u0XEmbwtO491DHzbdd3916TT60wMoIBfjYTymWG32ONI3xAsEK%2FO4u06ZhiMycymYhI5Vh2bSSRjQICe30xQ6nq4PEZqQ1DO5EJAWz%2Fjj5sJkWxPPP9MV63RJVgiz4y5heC0Xwbk%2FNrU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76dbfc45af07b4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eb76c0b3adf4098ad8a9d1e38250758f
99610ddb2b4ec6d04250ac244f966951695d4f00
01ed8c191c175471aee23cbc196d558e5bf5209f166806fc97db08eb06544bab
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01ED8C191C175471AEE23CBC196D558E5BF5209F166806FC97DB08EB06544BAB"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16375
Expires: Tue, 22 Nov 2022 00:28:47 GMT
Date: Mon, 21 Nov 2022 19:55:52 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4843de3bf95411e6aa89834def44bb86
1f1882351ac63fba73a22014382f69df5e02ec96
1e6ed1df02f8fa6c89ddca66f7c9981f8a06127d7ec90b503703137e823bb4b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3815
Cache-Control: max-age=142740
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:52 GMT
Etag: "637b5375-1d7"
Expires: Wed, 23 Nov 2022 11:34:52 GMT
Last-Modified: Mon, 21 Nov 2022 10:31:17 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 21 Nov 2022 19:09:16 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2796
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8a6c553d89cb6fd1de4787fee2a0e0dc
b974e022ea8675c0a09f58864cc99df05b5b1241
a62ecedcb0953814f982237818a3d902fdca501f82b675629d28b5d476e0fbfa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A62ECEDCB0953814F982237818A3D902FDCA501F82B675629D28B5D476E0FBFA"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16062
Expires: Tue, 22 Nov 2022 00:23:34 GMT
Date: Mon, 21 Nov 2022 19:55:52 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: aIak5G4ou29zWSCNxl/HsZng/G4DjNf1wT8wIkuq4a7/i7L2/3lGckIT1pxsypAUSn5IDhTzNmE=
x-amz-request-id: MQZ3JKTGJHCMZK10
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 21 Nov 2022 19:39:16 GMT
age: 996
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 21 Nov 2022 19:55:52 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 3de8775c131847c1f9e7ab9b833119cc
0cf88c5657d204665893f702c576e9222b81ece9
224378add9fd999435efce485a2af460b80e006a52c715b522e3c13a35fd4044
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 853
Cache-Control: max-age=164974
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Etag: "637bb5e2-116"
Expires: Wed, 23 Nov 2022 17:45:27 GMT
Last-Modified: Mon, 21 Nov 2022 17:31:14 GMT
Server: ECS (amb/6B76)
X-Cache: HIT
Content-Length: 278
zone-telechargement-albums.com/fontawesome-all.min.css
200 OK 7.7 kB URL HTTP/1.1 zone-telechargement-albums.com/fontawesome-all.min.css
IP
File type ASCII text, with very long lines (35179), with CRLF line terminators
Hash e0ebeb29ce862bb454f2826ac17e3cc7
373174302b217307244f390a2ca236b08f55395a
514b8becd5fad7a55591c7cbea3be69488c5e504fd180441ec1ad95ec646aa86
GET /fontawesome-all.min.css HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1454518356
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 19:55:53 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:53:21 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R2I2aNIYaxGxS8aAK07bW5bGUGWX8HWM2IIAK%2B3sjVNDWEvy%2F%2F5LCJG7Nr4qYKpqBXYtAbVI2g8H5hPKJBlMU%2Fs245jM3%2Fa2nGslQr2Y%2BRK7AZ93M4xXnm6UD5%2FnbEqo3lmz68fNlagBEXaM7uxVEsQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dbfc47ec8ab4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash 89510b3c97cf8273c75f5d6b8624889f
32ad2a078e13eb3ef602e58fc3459524184a3e4d
7c54de2e4437c2c608b4e95ef4947dde0f21f6c008c8f65e202ff9a8ef011d08
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5656
Cache-Control: max-age=166905
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Etag: "637baaaa-1d7"
Expires: Wed, 23 Nov 2022 18:17:38 GMT
Last-Modified: Mon, 21 Nov 2022 16:43:22 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
zone-telechargement-albums.com/jplayer/dist/skin/blue.monday/css/jplayer.blue.monday.min.css
200 OK 1.9 kB URL HTTP/1.1 zone-telechargement-albums.com/jplayer/dist/skin/blue.monday/css/jplayer.blue.monday.min.css
IP
File type ASCII text, with very long lines (8916), with no line terminators
Hash 63579caa005c0771b7967fc495af1750
08f208f4eb2f355ea438013a6149d4d61b2ae06c
0e6abeb06bd2482034739d9aa0c7a8ca5e2d9d23e1c22002849d6856d9a23892
GET /jplayer/dist/skin/blue.monday/css/jplayer.blue.monday.min.css HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1454518356
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 19:55:53 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 10:58:16 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CqwV0Ta%2B0iNMsVItO6kTPqCt9RwRKqUi9Rf%2FV7zdg9Y5ecV1N7%2FiGKlF29s6DMgPrrM8ZxcE8%2BthNpTnLT8wzHZXTYlzMdYWjg%2FLskLQLn587SLavDAaT8YK4cI97ZbYS2dzg%2BryUBOGU09Z%2BiIZJQ4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dbfc47fdd9b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdn.jsdelivr.net/npm/bootstrap@5.0.1/dist/css/bootstrap.min.css
200 OK 23 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.1/dist/css/bootstrap.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65306)
Hash ce26ee4a5b9806b376f44f1e3b9c1ed0
bb1a001cc78839836d1a4d6f7a08821250e000a2
4860148d3bcb23f5710e8124f11dc521ce83440627bb86eacc73ae6357e14b2a
GET /npm/bootstrap@5.0.1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://zone-telechargement-albums.com
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.0.1
x-jsd-version-type: version
etag: W/"25fef-PDndyutgvrSms9Gt5O+JOaWK1Zo"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 21 Nov 2022 19:55:53 GMT
age: 9250216
x-served-by: cache-fra19163-FRA, cache-bma1670-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22929
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
200 OK 6.2 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP
File type ASCII text, with very long lines (19015)
Hash 7b4114faa411d059a9a5ac4b5b4d9dee
277da4486916fa3a4ab3375f47bc98f58dbf90f6
60b3528de2f7d48cbb335d19dddef756aaacc70f73d4254a2ef17978a14ca0d9
GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://zone-telechargement-albums.com
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 21 Nov 2022 19:55:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 873096
expires: Sat, 11 Nov 2023 19:55:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nWg06shLm52cI8uNTdkeXzAN8BcfrrRIuDj4BwWK1W6KMlbpCoSot3BUxZZ0HQAc%2BYXQXg0Z9I5t986AO%2B4%2Fbb8%2BAi9X3d1LjUgM1TUwYZ20cB5PPSOfs2n39l%2BPifGvKbPDZPXh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76dbfc487a74b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 2e4fc2212719e20e177883ce2286464b
3a33c00c7c5c7bad18b7f805c4b976158664f4fb
b08ab97197e32413ae72e6f75372876d806315867b37190bc9635ab106fa7c76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1475
Cache-Control: max-age=156222
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Etag: "637b9144-117"
Expires: Wed, 23 Nov 2022 15:19:35 GMT
Last-Modified: Mon, 21 Nov 2022 14:55:00 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
cdn.jsdelivr.net/npm/bootstrap@5.0.1/dist/js/bootstrap.bundle.min.js
200 OK 22 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.0.1/dist/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65299)
Hash 327521bb0a0293b819ad7f660c8bd131
87a86071ef6e0848dd18f4f4b551b69373219263
4574cbb969068a76aee2d0431c0dd7967312b87c5b25e47bcb6878f10440f5b2
GET /npm/bootstrap@5.0.1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://zone-telechargement-albums.com
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.1
x-jsd-version-type: version
etag: W/"1339c-XbTEDbxr09liPumKIGHdJliFzy4"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 21 Nov 2022 19:55:53 GMT
age: 7181611
x-served-by: cache-fra19130-FRA, cache-bma1670-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 22454
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8796b1bba5e0df458c07179adea64173
b3c3f64718de099805a200e156774ea356a08132
ae32033094ed99df37e4537b91ec3d52a8fd2f0d2f538e3c81901e1f9c29a0a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
code.jquery.com/jquery-3.2.1.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-3.2.1.min.js
IP
File type ASCII text, with very long lines (32058)
Hash 148f8d3ffd9cc02048c5f4d1cc83c407
9f2b89cfd151be6a29b4d43ad64d164fb8471046
4dc681da48ba2b417e613e8e027ff5322963c3a3697a8ba97973cfefb48def5e
GET /jquery-3.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 21 Nov 2022 19:55:53 GMT
content-encoding: gzip
content-length: 30125
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15283"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669060553.dop010.sk1.t,1669060553.cds231.sk1.hn,1669060553.cds222.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 662c6190c63609f87a23660fc808a650
a4178dd92d6f8a4f7c4da846a08d4104575f3636
93a8fd2af027f09640a8f5c3e2f10603d8b7aff4c74bc274cdbea7deeb396f3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zone-telechargement-albums.com/style.css?rand=
200 OK 1.1 kB URL HTTP/1.1 zone-telechargement-albums.com/style.css?rand=
IP
File type ASCII text, with CRLF line terminators
Hash 2390d04cec8b8301404c8bdf0ec7eb9e
76efe76c19a75c20ac6e544e090331b42420fc0f
8375ce8e0b4a265f1ac119a99bae830c3e8853c80aa9d7ea17144ab03c6bb6b8
GET /style.css?rand= HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1454518356
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 19:55:53 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 07:26:59 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L9wyK%2BcsKOyg39cV7jdl9KHzqsSNX5B%2Fcq77HefaePexqJeR9ARCHewtc8ES3rLqinvduHtFdqyUe8gWyIGbpIrvn6oNCrjtBWGfTp43NrwsRIZb8aU1ILj1QROmFOy4Ta281H7EbshIW0ZE8ztHki8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dbfc47e9a00b65-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
i.imgur.com/llF5iyg.gif
200 OK 55 kB IP
File type GIF image data, version 89a, 512 x 512\012- data
Hash bb533f76423cab3aa8f798501357e763
9316c9673c9190d7313946f540b7e0e17de6fbc5
db505c6d20a02c36e119ed16c0d2833a181de96d01993f0872c9d0d48afa0945
GET /llF5iyg.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Jul 2019 23:07:36 GMT
etag: "bb533f76423cab3aa8f798501357e763"
content-type: image/gif
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 21 Nov 2022 19:55:53 GMT
age: 618877
x-served-by: cache-iad-kcgs7200051-IAD, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 360, 1
x-timer: S1669060553.046433,VS0,VE5
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 54553
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-68420562-9
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-68420562-9
IP
File type ASCII text, with very long lines (1921)
Hash f4e8151d482384cc357c0d87dc5f6a01
a7a3ee5d83726bed752cd25d8a78447c747587bd
70d01f7f49612e41d8ade4134ef768fba279d085cc0fdafc8eac654cae7687f2
GET /gtag/js?id=UA-68420562-9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 21 Nov 2022 19:55:53 GMT
expires: Mon, 21 Nov 2022 19:55:53 GMT
cache-control: private, max-age=900
last-modified: Mon, 21 Nov 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43613
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
is2-ssl.mzstatic.com/image/thumb/Music114/v4/ae/54/f7/ae54f798-02bc-3142-6fdd-3af0833b0b93/7031160608419_cover.jpg/600x600bb.png
200 OK 496 kB URL HTTP/2 is2-ssl.mzstatic.com/image/thumb/Music114/v4/ae/54/f7/ae54f798-02bc-3142-6fdd-3af0833b0b93/7031160608419_cover.jpg/600x600bb.png
IP
File type PNG image data, 600 x 600, 8-bit/color RGB, non-interlaced\012- data
Size 496 kB (495984 bytes)
Hash 0245669ed110429ba3747697248beaf3
e28f9085ed1ed0b9943f8d65ceb613bf3185202b
6ee3a5a7a166e496ea4688f343063dba54dcff1362c8dfabc6a544568997d59f
GET /image/thumb/Music114/v4/ae/54/f7/ae54f798-02bc-3142-6fdd-3af0833b0b93/7031160608419_cover.jpg/600x600bb.png HTTP/1.1
Host: is2-ssl.mzstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: daiquiri/3.0.0
content-type: image/png
content-length: 495984
x-apple-jingle-correlation-key: NEF74M2W2MBAKPSGVFC2SIIBPI
x-apple-request-uuid: 690bfe33-56d3-0205-3e46-a945a921017a
b3: 690bfe3356d302053e46a945a921017a-c9062d308a486b88
x-b3-traceid: 690bfe3356d302053e46a945a921017a
x-b3-spanid: c9062d308a486b88
apple-seq: 0.0
apple-tk: false
apple-originating-system: UnknownOriginatingSystem
last-modified: Sun, 20 Nov 2022 21:29:46 GMT
etag: "MSwxLjI4LTIySCxWZXJzaW9uIDEyLjEgKEJ1aWxkIDIxQzUyKSwxNjY4OTc5Nzg2NTM5LGlzQnVpbGRWZXJzaW9uTm90U2V0LDUwMTY3LG5vRWZmZWN0"
access-control-allow-origin: *
access-control-expose-headers: Content-Length,Content-Type,ETag,Cache-Control,Expires,Last-Modified
timing-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-daiquiri-instance: daiquiri:13624002:mr85p00it-hyhk03094901:7987:22RELEASE148:daiquiri-amp-processing-shared-int-001-mr
cdnuuid: 8f74bbf9-4694-4c72-b5bb-c149ab500050-3692916704
cache-control: no-transform, max-age=14464288
date: Mon, 21 Nov 2022 19:55:53 GMT
x-cache: TCP_MISS from a23-36-79-6.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
x-cache-remote: TCP_MISS from a2-21-243-10.deploy.akamaitechnologies.com (AkamaiGHost/10.10.2-45048955) (-)
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash a1cc9793f232d1b9f13630af7d042459
7f57ad24ef78bb466c41e503e34761932eddaec5
abcb36559e9a41745eb19a20fd1f20cf847eb043fddfb2efeb0327238cbfeb62
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 19:55:53 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "15C04D6510736BB883E58B36D38CD84CB24EA6A2"
Expires: Tue, 22 Nov 2022 07:00:00 GMT
Last-Modified: Mon, 21 Nov 2022 19:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 960
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dbfc495bd31bfe-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8796b1bba5e0df458c07179adea64173
b3c3f64718de099805a200e156774ea356a08132
ae32033094ed99df37e4537b91ec3d52a8fd2f0d2f538e3c81901e1f9c29a0a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 662c6190c63609f87a23660fc808a650
a4178dd92d6f8a4f7c4da846a08d4104575f3636
93a8fd2af027f09640a8f5c3e2f10603d8b7aff4c74bc274cdbea7deeb396f3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9afe0ae0199aff69fefbe5a55490d31
126f648ad266469bf531b5c08f7f71a973d0eeb0
105d272d89fa39de018c77cb85f97c12af739243c6bf8172e2914217bd2efec5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9afe0ae0199aff69fefbe5a55490d31
126f648ad266469bf531b5c08f7f71a973d0eeb0
105d272d89fa39de018c77cb85f97c12af739243c6bf8172e2914217bd2efec5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/cousine/v25/d6lIkaiiRdih4SpP_SQvzA.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/cousine/v25/d6lIkaiiRdih4SpP_SQvzA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18408, version 1.0\012- data
Hash 2925e8798e52aad85f4bfcb7760c3027
e1a3749264b421649cdce85f8b3350b7bef5c15c
a554da152dffb3b46e6dab5a4cb63cebeb27cc44c6ea851a398a6bbde4fbbfcb
GET /s/cousine/v25/d6lIkaiiRdih4SpP_SQvzA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://zone-telechargement-albums.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 14:11:44 GMT
expires: Thu, 16 Nov 2023 14:11:44 GMT
cache-control: public, max-age=31536000
age: 452649
last-modified: Tue, 19 Apr 2022 19:32:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cousine/v25/d6lIkaiiRdih4SpP_SAvzAbt.woff2
200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/cousine/v25/d6lIkaiiRdih4SpP_SAvzAbt.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12104, version 1.0\012- data
Hash c5dab6d5b8e5a5c18eb1944fcbc2a276
c58ecf28106f4799426cf94957f6058745370b64
4d9189c784ca7e4029c4a7680fad561e72572787e29634357fa6eaad8912941b
GET /s/cousine/v25/d6lIkaiiRdih4SpP_SAvzAbt.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://zone-telechargement-albums.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12104
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 08:46:39 GMT
expires: Thu, 16 Nov 2023 08:46:39 GMT
cache-control: public, max-age=31536000
age: 472154
last-modified: Tue, 19 Apr 2022 19:31:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
zone-telechargement-albums.com/webfonts/fa-solid-900.woff2
200 OK 40 kB URL HTTP/1.1 zone-telechargement-albums.com/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 40148, version 1.0\012- data
Hash 0ab54153eeeca0ce03978cc463b257f7
6ec6d36cb2464b4e821cfabb532f310bd342601c
434466b59545a8a1cac6ddb38197cdc6b35995a98c3f3812fb88d61b1c300dd3
GET /webfonts/fa-solid-900.woff2 HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/fontawesome-all.min.css
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 19:55:53 GMT
Content-Type: font/woff2
Content-Length: 40148
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:53:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5HGdgznm%2B59Ik8Z72GBWTgkw8wX088wPgLNshy3RcqQU1AQNwyZEG1oHN2Es2yvLprtTHCgIVvCOS0dDAjq5lXAoY7iqSop3W69TfVgcozc0z2Svk5MgFDoBTNrt5A9BKXS1jt0btQoZVlGfmeUh%2Buk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dbfc499980b4ed-OSL
alt-svc: h2=":443"; ma=60
zone-telechargement-albums.com/img/monkey_emoji_2.png
200 OK 27 kB URL HTTP/1.1 zone-telechargement-albums.com/img/monkey_emoji_2.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 813b8f62a9779fd47c4027041835fab4
33113843f2af85f1b88f7e61c606de45e12d830c
9a24da818ef612be3c44a9df6e0a5688aeecc3ac99bc51ea56ca225586ba7d7a
GET /img/monkey_emoji_2.png HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1454518356
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 19:55:53 GMT
Content-Type: image/png
Content-Length: 26782
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:12:20 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HXxDJTO9MnsCCgWZbaJuBlenTFJHRzwVi8%2FG52i8T88%2Bn61K61poIjtF1LGdiHEE1mj5gcffVXTp1Hrhno%2F9C7AJbjasPDK1YDzCJx6iY0Lor3f30C5QjPs1EmkVgm5GFl88rvj5XOEhjnK7CjPNoUQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dbfc494977b4f4-OSL
alt-svc: h2=":443"; ma=60
zone-telechargement-albums.com/img/monkey_emoji_1.png
200 OK 26 kB URL HTTP/1.1 zone-telechargement-albums.com/img/monkey_emoji_1.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash f5dd413a76fa8e65b1d7c38314381942
91a6cccd63c979beff1eadd5a8c5059fe50efade
7598110b160ab8d746d6f3062f87891f642ff0af2806e3622a2e5c1c4509ce59
GET /img/monkey_emoji_1.png HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1454518356
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 19:55:53 GMT
Content-Type: image/png
Content-Length: 25933
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:12:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gbA1dGV3zhSDAZYX4X%2BY7S04nxXNVJmeIO2mJOUTfgwhaqdv8ZPtv4eUPSShcKgEZWDzof1%2B73IIaLGYZWDPzMoCW7t88xV9fcJkZcV12eACBAWGhDCNuiHuommboD6AB9R2AlA2ZTrPhAZXkK9liDM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dbfc494c840b65-OSL
alt-svc: h2=":443"; ma=60
zone-telechargement-albums.com/img/monkey_emoji_3.png
200 OK 27 kB URL HTTP/1.1 zone-telechargement-albums.com/img/monkey_emoji_3.png
IP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash b698e0210ff1e18994c438fd980fa55b
8bfdda219bde3ce23ecf1f5e12a2c4d6f3d3c555
1d85326d6c3ae3cc75a087223dabf954bd0dbd1042c5311e5a7e5d604b981bf3
GET /img/monkey_emoji_3.png HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1454518356
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 19:55:53 GMT
Content-Type: image/png
Content-Length: 26671
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:12:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j013mEqezswWn0iqg3O9IxhgQ94Miw343%2FnI2Eju11x9gTSGEsYDQU%2F3y4W9EA4vH7saylGbuo1M9zr1LIZeAxRJY2u2m9gV5wyHuxLc6dxjJHnph0SacDMC4OdgdM91RsnbM3mQLZGwdgt5J6o1MAs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dbfc495f22b4f1-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9afe0ae0199aff69fefbe5a55490d31
126f648ad266469bf531b5c08f7f71a973d0eeb0
105d272d89fa39de018c77cb85f97c12af739243c6bf8172e2914217bd2efec5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zone-telechargement-albums.com/favicon.ico
404 Not Found 238 B URL HTTP/1.1 zone-telechargement-albums.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
GET /favicon.ico HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/pwd.php?id=1454518356
HTTP/1.1 404 Not Found
Date: Mon, 21 Nov 2022 19:55:53 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 20
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JMJveXSDbFpCwtt4Wr%2BQ3lz55LyLLBb6LrPGNpPGJCfGb1k%2BWzK13%2Fh4RHJoZa3I%2Fote%2BEZfIdWHN664aQAVGp3ojEYLNS6hxTXXfLiOgOuYMP%2B8%2BFJiw9jFEk0HQybhao2zisfatS1aoURZdpXzahE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dbfc4a79b9b503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 21 Nov 2022 18:41:09 GMT
expires: Mon, 21 Nov 2022 20:41:09 GMT
cache-control: public, max-age=7200
age: 4484
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 21 Nov 2022 19:08:47 GMT
cache-control: public,max-age=3600
age: 2826
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2db0ebb9efcf3be3c92f23b61de5c065
dd830565723f18a7944c26d24b0fb142d06a71a5
8615316184c4d1d64db923a5364363bbb3d25e146a042c5fbd5bf0cfcec8effb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 650
Cache-Control: max-age=134511
Content-Type: application/ocsp-response
Date: Mon, 21 Nov 2022 19:55:53 GMT
Etag: "637b3fae-1d7"
Expires: Wed, 23 Nov 2022 09:17:44 GMT
Last-Modified: Mon, 21 Nov 2022 09:06:54 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
dwmsurhf1svv8.cloudfront.net/public/external/css_front.css
200 OK 6.6 kB URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/external/css_front.css
IP
File type ASCII text, with CRLF line terminators
Hash 2649f9832b1ede1bca6b60a16e50a676
c96e86a59be0ab5f2a1c86558205193597822742
a7bd79b6fba60944ee3a9c153108ff0819d2db57850116ac7065a86db08af4ec
GET /public/external/css_front.css HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 6596
date: Mon, 21 Nov 2022 19:55:53 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
last-modified: Tue, 23 Jun 2020 20:06:47 GMT
etag: "19c4-5a8c5e62e9d0a"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: adCEI1kHGE1f53w3z7Te0oe_5OUOfjzUtU7bXxRnDMMdmn0-NjL0Hg==
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /KOzmriGKf7l6jHjtoep7g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: LdMsBv3YEcADKEEnX92HuWYAQm8=
dwmsurhf1svv8.cloudfront.net/public/external/v2/html.874265.dfd99.0.js
200 OK 20 kB URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/external/v2/html.874265.dfd99.0.js
IP
File type ASCII text, with very long lines (17112), with CRLF line terminators
Hash 1cf1464b31388ef220ac1b898769f5d6
2c808993ad9364684494cd7720d795acde4f191d
24bdf6f172a6c70cf0be529b0d336d18bce0d4ec74ab38059073a5e1259ae18e
Analyzer Verdict Alert fortinet Phishing
GET /public/external/v2/html.874265.dfd99.0.js HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Mon, 21 Nov 2022 19:55:53 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GtXyNCNHhYXI3E6AJVb5kmZ234jEt0tmjVxz3k14FH038aQS94UXng==
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP
File type ASCII text, with very long lines (32065)
Hash 6d973c8b7e2439d958e09c0a1ab9fe50
05ae0830200c20b9a2dfd5a825adc400481a60fb
f3c122dc227e829ed96b2a754296809201bd78abbad7ba50ef5079654e1cc894
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 09:57:25 GMT
expires: Sun, 19 Nov 2023 09:57:25 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 208709
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dwmsurhf1svv8.cloudfront.net/public/guid?cpguid=cwcyrggry&s1=album-pwd-smart&s2=1454518356%7C2012-04-12&e=ll&t=1669060554660
200 OK 0 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/guid?cpguid=cwcyrggry&s1=album-pwd-smart&s2=1454518356%7C2012-04-12&e=ll&t=1669060554660
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /public/guid?cpguid=cwcyrggry&s1=album-pwd-smart&s2=1454518356%7C2012-04-12&e=ll&t=1669060554660 HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 21 Nov 2022 19:55:54 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JHfk2wOoP8nI-p0J-gZpRkhDmA2jJ9FD169IeoYxb6SoEfhP-ydVHQ==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 798ef0955be535268547903e74dacfcd
782823486f9ded693609cade264d1950e816f7d0
75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16021
Expires: Tue, 22 Nov 2022 00:22:56 GMT
Date: Mon, 21 Nov 2022 19:55:55 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F645dc32f-cd66-4021-92e9-77c4eff2fa1f.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F645dc32f-cd66-4021-92e9-77c4eff2fa1f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 96135f96986369533c0362367c1e6fd8
bc8b0612b79cb30817880fac9728318f837854b4
f4eab133baf21daae8b809966e8ffbe64a2414fd334538a226a2a39ab39c3d46
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F645dc32f-cd66-4021-92e9-77c4eff2fa1f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5045
x-amzn-requestid: 93295168-385b-4b26-92e0-65858db59541
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0PgfGfVoAMFjWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377f936-7d3d9e44191051f454bd53ca;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:29:26 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hYkfj6mcRyzHioX7RAjvhpITDBX_CXLhum92tHz6ilGAY2C0fNi48g==
via: 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 a9e73292d0b92053c3e38dcec15fd0e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 08:37:09 GMT
age: 40726
etag: "bc8b0612b79cb30817880fac9728318f837854b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e2c726b-e91a-4cf6-95b8-c267e110416c.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e2c726b-e91a-4cf6-95b8-c267e110416c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9e0f5c07511d0f6ad0f2441db92797d
2dcc6187d7173ce741975ad4ec24435c9dcb0880
3c57bf58bab9d54dd152eb0260a203b1cb201a9e2d960f25a0cea685b539ea04
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e2c726b-e91a-4cf6-95b8-c267e110416c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5342
x-amzn-requestid: e396cea4-ddae-4b88-a73a-ceafb1e11620
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0b91EMLoAMFYYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63780d25-7f1187713f288a0c158508ea;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 22:54:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: PkFAourr7ixQ5NYcdMugerMxFTdCLgIAaBz6erANuppgzE2Tm4yVpA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Sun, 20 Nov 2022 22:34:27 GMT
age: 76888
etag: "2dcc6187d7173ce741975ad4ec24435c9dcb0880"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F308504cf-ed6b-4fb8-bc67-4165549bba4e.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F308504cf-ed6b-4fb8-bc67-4165549bba4e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 131cae0245e456c2497833b48cc1be0e
01b7bf2cfcdac73911dbd0a570d262978a43daf1
539cc2fdefb049df026b18d450c56d85b7821b8723ea0070efa460096669576e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F308504cf-ed6b-4fb8-bc67-4165549bba4e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7996
x-amzn-requestid: af3a6545-f0ad-40de-b1f6-56b9607242f4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1BvREKZoAMFzDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63784994-2659c8ec5fc04c510ea0e643;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 03:12:20 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: UU9m-kzHM4oKCHNiK2q4NWftsCueXeiBpJkk0cDv3et4v3MpF6eCtQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 f268a165a18929fd0a24a3189fbd16b2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 04:04:43 GMT
age: 57072
etag: "01b7bf2cfcdac73911dbd0a570d262978a43daf1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5ae4c1550ea6b360584adf78da2870d5
989595968f50d2a4f3a3f45aebd11c9e89abce2a
5efb77ca45f50c44478da07f2decf43752a3317c6de08cab22a96630d4962f36
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 21 Nov 2022 19:55:55 GMT
Last-Modified: Mon, 21 Nov 2022 19:05:31 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rKwB0P7eOtqipBJBliwW3aWj4mayU7Bt4QZDsSJJMzsdE18v0BT9mA==
Age: 3024
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f6118fc03f31862ff68fef8a2b9a7f
318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f3c55266-9b03-4b7f-b076-fdf56704318e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QQyECioAMFzdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6b-3e10cef6117a10a4115cfce7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9FO1gkdftjvJFDvAlxwLD63BP-liwnS2MImVhVdjg83wi4xJdM73Kg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 20 Nov 2022 21:36:36 GMT
age: 80359
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5ae4c1550ea6b360584adf78da2870d5
989595968f50d2a4f3a3f45aebd11c9e89abce2a
5efb77ca45f50c44478da07f2decf43752a3317c6de08cab22a96630d4962f36
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=111797
Date: Mon, 21 Nov 2022 19:55:55 GMT
Etag: "637ad91f-1d7"
Expires: Wed, 23 Nov 2022 02:59:12 GMT
Last-Modified: Mon, 21 Nov 2022 01:49:19 GMT
Server: ECS (nyb/1D06)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xTDNTUPGhKH7d09d-g7yzteevPRzTBwvr0btKuvk251gVSAC5PpnDQ==
Age: 4193
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19c1a99-6290-4f30-afcf-c426abf8c229.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19c1a99-6290-4f30-afcf-c426abf8c229.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 907cdf495815b066cbeaccd9c862c544
6082de99b599bc3c9ce14e2641a2bf60f9f187d8
fbccb495391bba54b463e8c4eaf3207af00b098c4b5f816011d240257aa56f6c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19c1a99-6290-4f30-afcf-c426abf8c229.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11562
x-amzn-requestid: f01b0409-b43d-4d9c-92c0-0023c5e49d58
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3jV_GDmIAMFvqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794c26-69366c73760dcd5b72634f73;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:35:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: QNyLmlKXlMlR06NR0JSad678o8CCBsH3bDIvgDIy-j1uoi72NohCrA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 20 Nov 2022 21:42:27 GMT
age: 80008
etag: "6082de99b599bc3c9ce14e2641a2bf60f9f187d8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff64f225f-d92d-42e1-a0cd-0b9c89e36291.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff64f225f-d92d-42e1-a0cd-0b9c89e36291.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a8070a1aa0d48b75c639fa24eec3d96
14a81b4e2bdcdcdd951aa6660dc640c0292a2109
70b29ce3872a0c46d8d0e61f2801df1a98c8ea6e516adb1c2fe1bdad35f654f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff64f225f-d92d-42e1-a0cd-0b9c89e36291.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9042
x-amzn-requestid: 02203d7e-e15a-40d8-a09e-c40299c6f332
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bu2bSH6xoAMF1FA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375d114-79f15fbc1c64941e54c6d5e3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 06:13:40 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YHoIX9fgjqNaOq_84IdURDMNigg62C8616_qky56Xx7ok4LJvvqEfw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 12:54:30 GMT
age: 25285
etag: "14a81b4e2bdcdcdd951aa6660dc640c0292a2109"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5ae4c1550ea6b360584adf78da2870d5
989595968f50d2a4f3a3f45aebd11c9e89abce2a
5efb77ca45f50c44478da07f2decf43752a3317c6de08cab22a96630d4962f36
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 21 Nov 2022 19:55:55 GMT
Etag: "637ad91f-1d7"
Last-Modified: Mon, 21 Nov 2022 19:14:55 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8VDtIpNrfyMPKuhsG_DR9Vh3gChisbtMgq83GN5y639sO5tBGdq8Dg==
Age: 2460
dwmsurhf1svv8.cloudfront.net/public/external/guid.js
200 OK 862 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/external/guid.js
IP
File type ASCII text, with CRLF line terminators
Hash a983b9595d3219f26887592a358c9804
0de2d3f96ed4a892b4f476ad29206dc9f7b6cb71
e1996013bea18595368a7d2452d2a96a8a66b59bd08cde2935e36ffa0f985fda
Analyzer Verdict Alert fortinet Phishing
GET /public/external/guid.js HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/public/ct?cpguid=cwcyrggry&s1=album-pwd-smart&s2=1454518356%7C2012-04-12&it=874265&w=1280&h=1002&key=dfd99&m=0&r=%1D%01%01%05OZZ%0F%1A%1B%10X%01%10%19%10%16%1D%14%07%12%10%18%10%1B%01X%14%19%17%00%18%06%5B%16%1A%18Z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 862
date: Mon, 21 Nov 2022 19:55:55 GMT
server: Apache/2.4.46 () OpenSSL/1.0.2k-fips PHP/7.4.11
last-modified: Tue, 11 Aug 2020 19:47:27 GMT
etag: "35e-5ac9f574655f4"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IeVrtklirgpAncXUo9PhYIBQAM4T9kQFW7wbLkqkrTyI7dhhskgMyw==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 5ae4c1550ea6b360584adf78da2870d5
989595968f50d2a4f3a3f45aebd11c9e89abce2a
5efb77ca45f50c44478da07f2decf43752a3317c6de08cab22a96630d4962f36
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=112396
Date: Mon, 21 Nov 2022 19:55:55 GMT
Etag: "637ad91f-1d7"
Expires: Wed, 23 Nov 2022 03:09:11 GMT
Last-Modified: Mon, 21 Nov 2022 01:49:19 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ybUtZqDEpXNgS8XVMbmEB-dGHGghgSnOLSATtFGyjB4j9JNzGovhTw==
Age: 4792
unpkg.com/imagesloaded@4/imagesloaded.pkgd.min.js
302 Found 17 kB URL HTTP/2 unpkg.com/imagesloaded@4/imagesloaded.pkgd.min.js
IP
File type ASCII text, with very long lines (1023), with CRLF line terminators
Hash 871b7ee1b421074e18f5eed51d69398f
89f09d0b1ee916c12686d7a9c96199f204f4b994
7df9fc3f51ac0f86832ec489678306f923485e5b3ac9d8ec8eac5604a0b79681
GET /imagesloaded@4/imagesloaded.pkgd.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 21 Nov 2022 19:55:53 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /imagesloaded@4.1.4/imagesloaded.pkgd.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJDVN64DA6NRMNYH8Q4BBQKF-ams
cf-cache-status: HIT
age: 545
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76dbfc48fbac0b06-OSL
X-Firefox-Spdy: h2
s3.us-west-1.amazonaws.com/cloudfls.co/themes/startui/css/lib/colorpicker/css/colorpicker.css
200 OK 3.2 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/themes/startui/css/lib/colorpicker/css/colorpicker.css
IP
File type ASCII text, with CRLF line terminators
Hash 88ad8a6ad0054fcfa70e25a6c2474272
58ab27741e83725ee1b48a507070f2df37bb4e4f
8157923832e020c3a4ed7ef85ad7d032d7b1b03b02e5502dce8ac9af9cedea53
GET /cloudfls.co/themes/startui/css/lib/colorpicker/css/colorpicker.css HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: s2/ZVniEz0GdI7lkR8sNlY/xYNeUoy/W8IrkqnU24e7eXtsp50c8pr3VABJsw06xw+1I2cv2Sdc=
x-amz-request-id: NAF1RP974MGSGWT0
Date: Mon, 21 Nov 2022 19:55:56 GMT
Last-Modified: Mon, 20 Jul 2020 19:18:06 GMT
ETag: "88ad8a6ad0054fcfa70e25a6c2474272"
x-amz-version-id: hOb.o1RIbFLjoUZHs0hFqKqWfq13uMQ1
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 3181
s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/151981978211ad81ad9b8c843e4b3c3052a8d6138c.css
200 OK 22 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/151981978211ad81ad9b8c843e4b3c3052a8d6138c.css
IP
Hash 4ee41ce0944001dd398a94528668aa9b
9a19710dea486f9cef4e40e10260e09679b53a99
27a59717d32af29935709bc2c2301d11291b4ca22dac6dd8d8741dffa6ac7ed8
GET /cloudfls.co/uploads/assets/151981978211ad81ad9b8c843e4b3c3052a8d6138c.css HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: mkAGIAFK0tY/tbuxnIQBgG+0R/0LUAxaQntEyW0rkTcqot1fBrcoWao1LYStuOG1IeGyi8B6/1c=
x-amz-request-id: NAFC64XNCX6KH0S9
Date: Mon, 21 Nov 2022 19:55:56 GMT
Last-Modified: Mon, 20 Jul 2020 19:44:07 GMT
ETag: "4ee41ce0944001dd398a94528668aa9b"
x-amz-version-id: mEuybZeBqZEWEnAJn0ikiMLlTy4658dV
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 22376
s3.us-west-1.amazonaws.com/cloudfls.co/themes/startui/css/lib/font-awesome/font-awesome.min.css
200 OK 28 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/themes/startui/css/lib/font-awesome/font-awesome.min.css
IP
File type ASCII text, with very long lines (27339)
Hash 8f6faef8ee84c7d1bad83516f21d84a7
b5cafbed1beb0a43d1aed63236e55f1e2731acd1
18a279cbb81cf6d0f22aeaa24fbe994cdf94f4fac41d26ec3850eecbcf1a0bd1
GET /cloudfls.co/themes/startui/css/lib/font-awesome/font-awesome.min.css HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: +/gHNBjyiogGagVcuMlgkGIZIU1JB9gW2uRSHfM4N/206B9OITMq5Mp2aQZ/O+78D9stg4/9m40=
x-amz-request-id: NAFEDA82FCNE5ZZR
Date: Mon, 21 Nov 2022 19:55:56 GMT
Last-Modified: Mon, 20 Jul 2020 19:18:06 GMT
ETag: "8f6faef8ee84c7d1bad83516f21d84a7"
x-amz-version-id: ePIWjfMKtCaP4bDE.eZHRaP_PF6hOabL
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Content-Length: 27502
dwmsurhf1svv8.cloudfront.net/public/guid?cpguid=cwcyrggry&s1=album-pwd-smart&s2=1454518356%7C2012-04-12&e=opl&t=1669060555641
200 OK 0 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/guid?cpguid=cwcyrggry&s1=album-pwd-smart&s2=1454518356%7C2012-04-12&e=opl&t=1669060555641
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /public/guid?cpguid=cwcyrggry&s1=album-pwd-smart&s2=1454518356%7C2012-04-12&e=opl&t=1669060555641 HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 21 Nov 2022 19:55:55 GMT
server: Apache/2.4.46 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Myo19kSoAmD56oPh4VkRmUshSgKRilUsLOoKTtNKLlgXmkXagrAG2w==
X-Firefox-Spdy: h2
s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/151999678694833b4c5a49a55ef7f9224b286820f0.js
200 OK 48 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/151999678694833b4c5a49a55ef7f9224b286820f0.js
IP
File type ASCII text, with CRLF line terminators
Hash 749f3a5be3474126eda77e97fbdc9d7d
57f2e094a01f933b1549870b848afec5bee66c2d
38b713ce7817068658fed4254cad04740e3eb5dc581f9b2100480feec4fe1622
GET /cloudfls.co/uploads/assets/151999678694833b4c5a49a55ef7f9224b286820f0.js HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dzBnk1AStETcmV3pixxRL48V9/91zEA7bSywBIMsdm5Rzwjdg0v63avrkBx9d+m9pMu+y95uBeU=
x-amz-request-id: NAFETRFR17DQ85MJ
Date: Mon, 21 Nov 2022 19:55:56 GMT
Last-Modified: Mon, 20 Jul 2020 19:44:08 GMT
ETag: "749f3a5be3474126eda77e97fbdc9d7d"
x-amz-version-id: JBcDJbWc5ONYvGQeSxxPJ._eBLuHPOyt
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 47834
dwmsurhf1svv8.cloudfront.net/public/external/impression.php?it=874265&time=1669060555641
200 OK 10 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/external/impression.php?it=874265&time=1669060555641
IP
File type ASCII text, with no line terminators
Hash 4f4a5a7cc9e3cac0fec86177622c6b60
b9111928e830fa182ee9eafd403626ac270691a2
3efc61bcf3a2a65c875e501412e9db8b00b4b554e4351e01fab46c2793e87b3d
GET /public/external/impression.php?it=874265&time=1669060555641 HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-length: 10
date: Mon, 21 Nov 2022 19:55:55 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S2hHFW0Vtjgy9yLxgAgOLhDKsJWAT-8I_KPzWgZjzXEYJ2WlIqowbQ==
X-Firefox-Spdy: h2
s3.us-west-1.amazonaws.com/cloudfls.co/uploads/150170764295f591d2e1daeb4fda0985149aa31c04.png
200 OK 2.5 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/uploads/150170764295f591d2e1daeb4fda0985149aa31c04.png
IP
File type PNG image data, 167 x 63, 8-bit/color RGBA, non-interlaced\012- data
Hash e7ee0c509b52e0c345f24631dca0eadb
e6a60c972bb922560774cb0155368e22035967cc
bed61deb1c5d1bc69150d71138328e0016d956d021c0cb03973f9e915a7424db
GET /cloudfls.co/uploads/150170764295f591d2e1daeb4fda0985149aa31c04.png HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: IHBrF/4hltqDMcPKGOjf58wN+fl172H9URuL6VgNmceZV+HiDorRKoMLZSQJVSFbedkCaHHX2+Q=
x-amz-request-id: NAF50PJS3YG0S5GA
Date: Mon, 21 Nov 2022 19:55:56 GMT
Last-Modified: Mon, 20 Jul 2020 19:22:35 GMT
ETag: "e7ee0c509b52e0c345f24631dca0eadb"
x-amz-version-id: 5MYnSQOqbLlzjhjhh7pOwZQ1Av0RIEEC
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 2471
s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/1541527423a607b15a712c4823251c88682d1dbf54.js?_=1669060554977
200 OK 7.8 kB URL HTTP/1.1 s3.us-west-1.amazonaws.com/cloudfls.co/uploads/assets/1541527423a607b15a712c4823251c88682d1dbf54.js?_=1669060554977
IP
File type ASCII text, with CRLF line terminators
Hash c2120b05cae0d60182021ca43c4a4727
997d99cae105610a6d6b96775da48cba526046bb
3d60086efeed0e3af6d42ff624a15d1274763b994bf240da9ddec88ef83d9f66
GET /cloudfls.co/uploads/assets/1541527423a607b15a712c4823251c88682d1dbf54.js?_=1669060554977 HTTP/1.1
Host: s3.us-west-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 5N6hbCIwxwc1Mph8MK7RztChROFRRyQnPA4jlEXdWneVoYXPJ51vVdRYCad9+baAZ12Dw/21u1o=
x-amz-request-id: NAFBRYR1SXB6NQKB
Date: Mon, 21 Nov 2022 19:55:56 GMT
Last-Modified: Mon, 20 Jul 2020 19:44:08 GMT
ETag: "c2120b05cae0d60182021ca43c4a4727"
x-amz-version-id: Xq5nEZrYhQVX6cpn7Hs2O6y63bMzhXo5
Accept-Ranges: bytes
Content-Type: application/x-javascript
Server: AmazonS3
Content-Length: 7816
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 21f9490b8543f44b42194f21f575d51e
1b944ed5cf98c0bb6102bad95c1345a618474a0d
2e905fa86af8ee7f7f75e9d19f0b3b0e323e3375da8e3fe5d49e4d0c24708a1f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=105000
Date: Mon, 21 Nov 2022 19:55:55 GMT
Etag: "637ac6d0-1d7"
Expires: Wed, 23 Nov 2022 01:05:55 GMT
Last-Modified: Mon, 21 Nov 2022 00:31:12 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7lvJNOyPjrBqAmDPy7KZjuvJ2Oypk3CfboA4zwSFZIYlfH2Vj5F4rw==
Age: 2083
affise-media-service-prod.s3.eu-central-1.amazonaws.com/affise-media-service-prod/offers/959/12339/2952634534.200x200.png
200 OK 10 kB URL HTTP/1.1 affise-media-service-prod.s3.eu-central-1.amazonaws.com/affise-media-service-prod/offers/959/12339/2952634534.200x200.png
IP
File type PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced\012- data
Hash 2a5e44d8f00c08f1b95f10566e553d62
dc004d9fb9931f3ea156af564de2dee73e822e39
42620f4ff66a8a66f6c43fe1bcaf8cf9149fe049145b2b8c8302a1b740537e3d
GET /affise-media-service-prod/offers/959/12339/2952634534.200x200.png HTTP/1.1
Host: affise-media-service-prod.s3.eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dwmsurhf1svv8.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: wICxbBYTo2bqsnNlNvFvlCeUGH16qIko3qXRdqV7WO8j8ycuKD3IT1YH7R2IM+TwLo8RJwoCEbo=
x-amz-request-id: NAFD3FYPSSTZCZ2A
Date: Mon, 21 Nov 2022 19:55:56 GMT
Last-Modified: Mon, 17 Jan 2022 07:52:45 GMT
ETag: "2a5e44d8f00c08f1b95f10566e553d62"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 10100
dwmsurhf1svv8.cloudfront.net/public/external/check.php?it=874265&time=1669060556136
200 OK 78 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/external/check.php?it=874265&time=1669060556136
IP
Hash 37ebc78db9bc22d4c972c5961163070c
865e3671f7e86b52d2f7b006b95ec7799a187572
9ef4a63fc5e0a14a7301d693d65d6acfc44cdf14853c4a20890198f2d5e52e3b
GET /public/external/check.php?it=874265&time=1669060556136 HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 78
date: Mon, 21 Nov 2022 19:55:56 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lMf9Ae7ImEOpXz1LRCO_AhLU78NbGTNjw43cTk8pndIjnbosuhYFeQ==
X-Firefox-Spdy: h2
unpkg.com/imagesloaded@4.1.4/imagesloaded.pkgd.min.js
200 OK 0 B URL HTTP/2 unpkg.com/imagesloaded@4.1.4/imagesloaded.pkgd.min.js
IP
GET /imagesloaded@4.1.4/imagesloaded.pkgd.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://zone-telechargement-albums.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 21 Nov 2022 19:55:53 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Tue, 02 Jan 2018 16:53:35 GMT
etag: W/"15da-bT4RF04iZo5p3yNuXEVCFo98v+w"
via: 1.1 fly.io
fly-request-id: 01G4XKHAKMA0TM8SXBZFY8DNJK-fra
cf-cache-status: HIT
age: 14504675
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76dbfc49dd5f0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.imgur.com/ZaWoU3s.png
200 OK 0 B IP
GET /ZaWoU3s.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 30 May 2021 15:23:56 GMT
etag: "1362ff58dbc8cd9992ba8a099c6b73c3"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 21 Nov 2022 19:55:53 GMT
age: 1756169
x-served-by: cache-iad-kiad7000160-IAD, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 1293, 1
x-timer: S1669060553.041542,VS0,VE2
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 126468
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Cousine
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Cousine
IP
GET /css?family=Cousine HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 21 Nov 2022 19:55:53 GMT
date: Mon, 21 Nov 2022 19:55:53 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
zone-telechargement-albums.com/img/bg1.jpg
200 OK 0 B URL HTTP/1.1 zone-telechargement-albums.com/img/bg1.jpg
IP
GET /img/bg1.jpg HTTP/1.1
Host: zone-telechargement-albums.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/style.css?rand=
HTTP/1.1 200 OK
Date: Mon, 21 Nov 2022 19:55:53 GMT
Content-Type: image/jpeg
Content-Length: 78370
Connection: keep-alive
Last-Modified: Sat, 23 Apr 2022 11:12:19 GMT
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FLAJNGW1O1LfSAcV4JRsg%2B6zSBTCrIRSzJ6VmudAKGaS5m7Bg73qtJ1DNDCiIWM%2FlxMIQ3NCvIlLEo5JScyHtu7J800bGVFcR2mIniwm8X9Rsu0Vb8WtaMPLSWCCOhC1mF1K7qL447eGSCl%2FbFAap08%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76dbfc497ecab503-OSL
alt-svc: h2=":443"; ma=60
db81lfl43r06.cloudfront.net/c6403d7.js
200 OK 0 B URL HTTP/2 db81lfl43r06.cloudfront.net/c6403d7.js
IP
Analyzer Verdict Alert fortinet Malware
GET /c6403d7.js HTTP/1.1
Host: db81lfl43r06.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Sun, 30 Oct 2022 13:50:57 GMT
server: AmazonS3
content-encoding: gzip
date: Mon, 21 Nov 2022 00:36:59 GMT
etag: W/"d0adadb877ad5f27d0c2a369cd5acb5e"
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gBH0YUmRFjNjQuV5fFXIl1AcYdXJd9ApFGJjSm95V7b9mxnsLV9-Bw==
age: 69535
X-Firefox-Spdy: h2
dwmsurhf1svv8.cloudfront.net/public/ct?cpguid=cwcyrggry&s1=album-pwd-smart&s2=1454518356%7C2012-04-12&it=874265&w=1280&h=1002&key=dfd99&m=0&r=%1D%01%01%05OZZ%0F%1A%1B%10X%01%10%19%10%16%1D%14%07%12%10%18%10%1B%01X%14%19%17%00%18%06%5B%16%1A%18Z
200 OK 0 B URL HTTP/2 dwmsurhf1svv8.cloudfront.net/public/ct?cpguid=cwcyrggry&s1=album-pwd-smart&s2=1454518356%7C2012-04-12&it=874265&w=1280&h=1002&key=dfd99&m=0&r=%1D%01%01%05OZZ%0F%1A%1B%10X%01%10%19%10%16%1D%14%07%12%10%18%10%1B%01X%14%19%17%00%18%06%5B%16%1A%18Z
IP
GET /public/ct?cpguid=cwcyrggry&s1=album-pwd-smart&s2=1454518356%7C2012-04-12&it=874265&w=1280&h=1002&key=dfd99&m=0&r=%1D%01%01%05OZZ%0F%1A%1B%10X%01%10%19%10%16%1D%14%07%12%10%18%10%1B%01X%14%19%17%00%18%06%5B%16%1A%18Z HTTP/1.1
Host: dwmsurhf1svv8.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bundev.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Mon, 21 Nov 2022 19:55:54 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
cache-control: no-cache, no-transform
pragma: no-cache
expires: Sat, 26 Jul 1997 05:00:00 GMT
x-cache: Miss from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0v0aKNwNBUeab3kFPJpp_z9jlGmKHuUlBknvduvSJFLgKv2EgHqxZw==
X-Firefox-Spdy: h2
i.imgur.com/trVzdzK.png
200 OK 0 B IP
GET /trVzdzK.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 31 May 2021 09:35:59 GMT
etag: "6d968a18e741259f4f297344c7ec51df"
x-amz-storage-class: STANDARD_IA
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 21 Nov 2022 19:55:53 GMT
age: 4004413
x-served-by: cache-iad-kjyo7100084-IAD, cache-bma1652-BMA
x-cache: HIT, HIT
x-cache-hits: 10143, 1
x-timer: S1669060553.041484,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 224804
X-Firefox-Spdy: h2
bundev.com/iframe_param.php?s1=album-pwd-smart&s2=1454518356|2012-04-12
200 OK 0 B URL HTTP/2 bundev.com/iframe_param.php?s1=album-pwd-smart&s2=1454518356|2012-04-12
IP
GET /iframe_param.php?s1=album-pwd-smart&s2=1454518356|2012-04-12 HTTP/1.1
Host: bundev.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://zone-telechargement-albums.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 21 Nov 2022 19:55:53 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s6BB4o%2FSlaBaiTncG8IV1bFZ9NVUT52%2BrHAQhoxe%2Fj5xgpqTG6Sxm1GQmEN3DOITLNazThn9CONRQLZjo4kAxjshY9LyUVjmah7D8SHVGDgh8FXKhRW9mtKZk1sx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76dbfc48eeb7b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.40.114
23.36.76.226
142.250.74.3
104.17.24.14
93.184.220.29
151.101.84.193
52.219.140.24