urlquery - report: www.mediacdnc.com/go/a1dd168f-6dfc-487a-a712-b00ff90aed53

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	Sent bytes	Received bytes	IP
deehalig.net (1)	105256	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	420	303	139.45.197.251
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	34.218.164.174
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3246	55798	34.120.237.76
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2374	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5856	34.160.144.191
televivo.online (10)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	7258	181095	194.135.87.58
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	229	34.117.237.239
ocsp.digicert.com (1)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341	797	93.184.220.29
www.mediacdnc.com (1)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	388	2337	3.70.16.242
r3.o.lencr.org (10)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3380	8863	23.36.76.226

Scan Date	Severity	Indicator	Comment
2022-12-07	medium	deehalig.net	Sinkholed

Date	UQ / IDS / BL	URL	IP
2023-06-01 04:58:43 UTC	0 - 0 - 2	go.rdrm1.click/go/3217fab2-ddfa-48c3-b6aa-fc8 (...)	3.70.16.242
2023-05-31 23:58:40 UTC	0 - 0 - 2	reminderset.com/go/f4e5a55d-d7da-4409-9280-96 (...)	3.70.16.242
2023-05-31 15:50:25 UTC	0 - 1 - 0	track.camf.quest/go/1ac40d60-edde-401d-8262-1 (...)	3.70.16.242
2023-05-31 11:05:53 UTC	0 - 0 - 3	www.oviva.site/go/8128a51b-2c7a-4941-a37f-447 (...)	3.70.16.242
2023-05-31 08:07:55 UTC	0 - 1 - 0	www.trafficit.online/go/ce4e607a-edbc-4366-96 (...)	3.70.16.242

Date	UQ / IDS / BL	URL	IP
2023-06-01 05:43:43 UTC	0 - 1 - 0	cdn.pluginserver.buildfire.com/plugins/ffa714 (...)	54.230.111.29
2023-06-01 05:41:59 UTC	0 - 0 - 0	lfodown01-b.cloudsink.net	54.241.183.232
2023-06-01 05:41:21 UTC	16 - 0 - 57	52.38.32.118/otp.login.php	52.38.32.118
2023-06-01 05:40:15 UTC	0 - 2 - 0	omvina.lt/?keyname=bWP8o89	15.197.130.221
2023-06-01 05:36:29 UTC	0 - 0 - 2	ramankatoch.com/	76.223.105.230

Date	UQ / IDS / BL	URL	IP
2023-05-21 04:08:24 UTC	0 - 0 - 1	www.mediacdnc.com/go/af40289c-8a19-469a-ab10- (...)	3.70.16.242
2023-05-18 04:05:40 UTC	0 - 0 - 3	www.mediacdnc.com/go/91ffb8b6-1016-4093-898e- (...)	3.70.16.242
2023-05-17 04:58:58 UTC	0 - 0 - 3	www.mediacdnc.com/go/5a9ec01d-b6cc-4672-a6ae- (...)	3.70.16.242
2023-05-13 10:03:25 UTC	0 - 0 - 2	www.mediacdnc.com/go/ef1356a0-6718-42aa-b797- (...)	3.70.16.242
2023-05-10 01:57:49 UTC	0 - 0 - 1	www.mediacdnc.com/go/8b59bc33-24a2-4483-a1b5- (...)	3.70.16.242

Date	UQ / IDS / BL	URL	IP
2023-01-04 08:58:43 UTC	0 - 0 - 1	thechance.site/kz/fortune/nl?key=eyJ0aW1lc3Rh (...)	212.237.233.86
2023-01-04 00:56:49 UTC	0 - 0 - 1	thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3R (...)	212.237.233.86
2023-01-01 08:58:19 UTC	0 - 0 - 1	www.mediacdnc.com/go/63cf3233-234a-4bd3-a207- (...)	3.70.16.242
2022-11-28 08:00:57 UTC	0 - 0 - 1	televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3 (...)	194.135.87.58
2022-11-27 21:59:04 UTC	0 - 0 - 1	televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3 (...)	194.135.87.58

Request	Response
GET /go/a1dd168f-6dfc-487a-a712-b00ff90aed53 HTTP/1.1 Host: www.mediacdnc.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	3.70.16.242 HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Server: openresty Date: Wed, 07 Dec 2022 21:06:26 GMT Content-Length: 736 Connection: keep-alive accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced Access-Control-Allow-Origin: * Location: https://televivo.online/kz/fortune/nl?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 Set-Cookie: bemob-uniq-visit:a1dd168f-6dfc-487a-a712-b00ff90aed53=1; Domain=www.mediacdnc.com; Path=/; Expires=Thu, 08 Dec 2022 21:06:26 GMT; HttpOnly bemob-rotation:a1dd168f-6dfc-487a-a712-b00ff90aed53:random:c95d25acb8e7d6602daf36d51e7e992a=0-2-0; Domain=www.mediacdnc.com; Path=/; Expires=Thu, 08 Dec 2022 21:06:26 GMT; HttpOnly bemob-track-url=https%3A%2F%2Ftelevivo.online%2Fkz%2Ffortune%2Fnl%3Fkey%3DeyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%253D%253D%26ccc%3DNO%26ppp%3DPropellerAds%253A%2520Push%2520Notifications%26tdom%3Dwww.mediacdnc.com%26bemobdata%3Dc%253Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%253D138188af-9d53-4dff-b1c3-88e15e5f5249..a%253D0..b%253D0; Domain=www.mediacdnc.com; Path=/; Expires=Thu, 08 Dec 2022 21:06:26 GMT; HttpOnly Vary: Accept X-Response-Time: 27.024ms Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache --- Additional Info --- Magic: HTML document, ASCII text, with very long lines (736), with no line terminators Size: 736 Md5: 4c3d122976950670f4a09073128ebc68 Sha1: 08cfd18e66efe25323d98855f9791e7715aec3f0 Sha256: b2ead99f97b635b2830d7b1092573f89d6cb16614fbcb8304d745843c5edae20
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492" Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2792 Expires: Wed, 07 Dec 2022 21:52:59 GMT Date: Wed, 07 Dec 2022 21:06:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 5ceaca9fd4ad000cb435820812fc69c8 Sha1: 8168397aaf7b572c89a9c83f46c0b65e4ac509f2 Sha256: 9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=19550 Expires: Thu, 08 Dec 2022 02:32:17 GMT Date: Wed, 07 Dec 2022 21:06:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aea93551fa9deb76ae49a3b4019d64fe Sha1: e3b8862057ebe839959228e42246d7b1807fc90c Sha256: 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Wed, 07 Dec 2022 20:08:05 GMT age: 3502 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10303 Expires: Wed, 07 Dec 2022 23:58:10 GMT Date: Wed, 07 Dec 2022 21:06:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 00e7703bd74975689fc9050356aaca6b Sha1: 9788fe6a36d6f278e8da329ebc5dd87bcd212317 Sha256: 593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: an/82lVRfsf+1Nh09oO43qQJEel0blhEIumcGwdSmQLW9bBwbxkcNmPCEKlaiafJERc2I9Ap/rAGzr98HQaMtg== x-amz-request-id: QE2DX2YRMW325BNC content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Wed, 07 Dec 2022 20:49:30 GMT age: 1017 last-modified: Wed, 30 Nov 2022 10:06:34 GMT etag: "53341dea33f4f3d9b4966f80589f429a" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 53341dea33f4f3d9b4966f80589f429a Sha1: 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C99BCCC9064BFDE6AD1E5E536BF54917DF2010E914C3A9088E5F57F30C4AC4BC" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15281 Expires: Thu, 08 Dec 2022 01:21:08 GMT Date: Wed, 07 Dec 2022 21:06:27 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: fd981a64a308d95b20b837d4b27df092 Sha1: bf57714d09705179916667426c89a98d20edcd0e Sha256: c99bccc9064bfde6ad1e5e536bf54917df2010e914c3a9088e5f57f30c4ac4bc
GET /kz/fortune/nl?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 HTTP/1.1 Host: televivo.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	194.135.87.58 HTTP/2 301 Moved Permanently content-type: text/html; charset=iso-8859-1 date: Wed, 07 Dec 2022 21:06:27 GMT server: Apache location: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 content-length: 555 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (397) Size: 555 Md5: 113a647b0a46ba43bc2255cc8507f4a1 Sha1: a5933cc0c3045c9544dda9a6ba5e18330c2f0241 Sha256: 0296aa3f3929c992a7158642cf82fc8088aaf0e65083023314e05335a7f7bda0
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Wed, 07 Dec 2022 21:06:27 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /kz/fortune/nl/images/refresh.png HTTP/1.1 Host: televivo.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	194.135.87.58 HTTP/2 200 OK content-type: image/png date: Wed, 07 Dec 2022 21:06:27 GMT server: Apache last-modified: Sat, 03 Dec 2022 13:23:42 GMT etag: "664-5eeec5cea35ed" accept-ranges: bytes content-length: 1636 cache-control: max-age=604800 expires: Wed, 14 Dec 2022 21:06:27 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 60 x 54, 8-bit/color RGB, non-interlaced\012- data Size: 1636 Md5: d99fc136124666d07dcd92ee9b57ab11 Sha1: 2da33147905803cba909fb0f6118a19934127339 Sha256: b0947ebbd1659de62310b214d9752e9625147e43ac1c271d2a9bb68e881221ff
GET /kz/fortune/nl/css/amazon.css HTTP/1.1 Host: televivo.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	194.135.87.58 HTTP/2 200 OK content-type: text/css date: Wed, 07 Dec 2022 21:06:27 GMT server: Apache last-modified: Sat, 03 Dec 2022 13:23:41 GMT etag: "13b9-5eeec5ce7a1c4-gzip" accept-ranges: bytes cache-control: max-age=604800 expires: Wed, 14 Dec 2022 21:06:27 GMT vary: Accept-Encoding content-encoding: gzip content-length: 1417 X-Firefox-Spdy: h2 --- Additional Info --- Magic: CSV text\012- , ASCII text Size: 1417 Md5: dba53cc75cf9b8c0386667ca20602f8c Sha1: 7c70f45df560bb70d2c058058a636eb7bf561e51 Sha256: 2de04f53e640274cb22d3bf5d366e6aae7f8bb2eee272b7a3e78036f54b2e447
GET /kz/fortune/nl/images/ip7.png HTTP/1.1 Host: televivo.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	194.135.87.58 HTTP/2 200 OK content-type: image/png date: Wed, 07 Dec 2022 21:06:27 GMT server: Apache last-modified: Sat, 03 Dec 2022 13:23:42 GMT etag: "e115-5eeec5ce9e7cd" accept-ranges: bytes content-length: 57621 cache-control: max-age=604800 expires: Wed, 14 Dec 2022 21:06:27 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 200 x 205, 8-bit/color RGBA, non-interlaced\012- data Size: 57621 Md5: d0f24523749ae712be55bbd1156c8912 Sha1: 2fe99223257db03a4ef8ef1260f4bae3ceb60dda Sha256: 859515bd032db0ca5e82784387c320814718a5f69132ba8b536ceabeaf0eecbf
GET /kz/fortune/nl/images/gift.gif HTTP/1.1 Host: televivo.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	194.135.87.58 HTTP/2 200 OK content-type: image/gif date: Wed, 07 Dec 2022 21:06:27 GMT server: Apache last-modified: Sat, 03 Dec 2022 13:23:42 GMT etag: "3cf6-5eeec5ce94f75" accept-ranges: bytes content-length: 15606 cache-control: max-age=604800 expires: Wed, 14 Dec 2022 21:06:27 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 100 x 100\012- data Size: 15606 Md5: 573c467d7a0b1c4c009ba98927dfa335 Sha1: 78d9c7efaeed568b74f1e4d1b4eb67e51dbbb9f1 Sha256: c4f1d8867d03d437694f1cac0c9df3a7f5006fb8df474023bfa1d78f88843ce8
GET /kz/fortune/nl/images/spin3.png HTTP/1.1 Host: televivo.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	194.135.87.58 HTTP/2 200 OK content-type: image/png date: Wed, 07 Dec 2022 21:06:27 GMT server: Apache last-modified: Sat, 03 Dec 2022 13:23:42 GMT etag: "1083b-5eeec5cea840e" accept-ranges: bytes content-length: 67643 cache-control: max-age=604800 expires: Wed, 14 Dec 2022 21:06:27 GMT X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced\012- data Size: 67643 Md5: cb61c64b457c53591bfa05115ca80801 Sha1: b574198dfe0dffed87dee4ddbda3cd21cc171a4b Sha256: 2ac2b892cac8661d4a89ed03f38f5e59767d7d1975519d64af9193d133fcf51e
GET /kz/fortune/nl/js/jquery.min.js HTTP/1.1 Host: televivo.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	194.135.87.58 HTTP/2 200 OK content-type: application/javascript date: Wed, 07 Dec 2022 21:06:27 GMT server: Apache last-modified: Sat, 03 Dec 2022 13:23:42 GMT etag: "1787d-5eeec5cec686f-gzip" accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip content-length: 33369 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (32341) Size: 33369 Md5: a455443006938869e740a38df8640ada Sha1: 869bd24af8e61e2c6b23cf158853505d5fe7afc2 Sha256: 685bd4372d5eca42e9dae6db1678618e08d2ca201bc4e7525adabc20021338b5
GET /kz/fortune/nl/spin_prize2.png HTTP/1.1 Host: televivo.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	194.135.87.58 HTTP/2 404 Not Found content-type: text/html; charset=iso-8859-1 date: Wed, 07 Dec 2022 21:06:27 GMT server: Apache content-length: 196 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 196 Md5: 62962daa1b19bbcc2db10b7bfd531ea6 Sha1: d64bae91091eda6a7532ebec06aa70893b79e1f8 Sha256: 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Wed, 07 Dec 2022 20:07:55 GMT age: 3512 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /favicon.ico HTTP/1.1 Host: televivo.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	194.135.87.58 HTTP/2 404 Not Found content-type: text/html; charset=iso-8859-1 date: Wed, 07 Dec 2022 21:06:27 GMT server: Apache content-length: 196 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 196 Md5: 62962daa1b19bbcc2db10b7bfd531ea6 Sha1: d64bae91091eda6a7532ebec06aa70893b79e1f8 Sha256: 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5051 Cache-Control: max-age=134674 Date: Wed, 07 Dec 2022 21:06:27 GMT Etag: "639057aa-1d7" Expires: Fri, 09 Dec 2022 10:31:01 GMT Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT Server: ECS (ska/F70F) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 053aff7451e55d4269dd9610ab070f3f Sha1: b3376256d11d159b0c7280ba1515b78d7d9e12ca Sha256: 24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: EfkqUME6RsaKqy45pcofnQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	34.218.164.174 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: GLWifpO9FGU8Ea/2KYkz8lTUrLk= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1" Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8407 Expires: Wed, 07 Dec 2022 23:26:36 GMT Date: Wed, 07 Dec 2022 21:06:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1ab1615b2c8cc26b12fc0cf41734ff07 Sha1: a7d54b3709ce75a20210e20013e6f06b0aa88e2d Sha256: 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1" Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8407 Expires: Wed, 07 Dec 2022 23:26:36 GMT Date: Wed, 07 Dec 2022 21:06:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1ab1615b2c8cc26b12fc0cf41734ff07 Sha1: a7d54b3709ce75a20210e20013e6f06b0aa88e2d Sha256: 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1" Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8407 Expires: Wed, 07 Dec 2022 23:26:36 GMT Date: Wed, 07 Dec 2022 21:06:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1ab1615b2c8cc26b12fc0cf41734ff07 Sha1: a7d54b3709ce75a20210e20013e6f06b0aa88e2d Sha256: 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1" Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8407 Expires: Wed, 07 Dec 2022 23:26:36 GMT Date: Wed, 07 Dec 2022 21:06:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1ab1615b2c8cc26b12fc0cf41734ff07 Sha1: a7d54b3709ce75a20210e20013e6f06b0aa88e2d Sha256: 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1" Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8407 Expires: Wed, 07 Dec 2022 23:26:36 GMT Date: Wed, 07 Dec 2022 21:06:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1ab1615b2c8cc26b12fc0cf41734ff07 Sha1: a7d54b3709ce75a20210e20013e6f06b0aa88e2d Sha256: 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8438 x-amzn-requestid: 0f5d1b0e-1193-4006-8a54-555681d9f62e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cvlqVGMjoAMFS6w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638fb641-6366ea6464122d857407cdff;Sampled=0 x-amzn-remapped-date: Tue, 06 Dec 2022 21:38:09 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 2j9gqNvWYRFM-li9Nj4nLAWe_eKWMSwagPgU3eAtk0pjcJUX4Q8XEA== via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Tue, 06 Dec 2022 21:55:40 GMT etag: "985c6761675e6bcc0186f64d55f94cf09352f05c" age: 83449 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8438 Md5: e95ebce9d79ba46cb96af9a45af1762f Sha1: 985c6761675e6bcc0186f64d55f94cf09352f05c Sha256: 5837d6bf31e57f955ba2577f112281cc33a5502b358c83192f4e396b57042ac0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19ffa93b-2002-4f40-ab8b-aa163e9b5939.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6186 x-amzn-requestid: 53d1d373-ff6c-4c59-bdeb-fff592bca586 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: csUsyGOEIAMFwfA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638e67eb-0156077b52dc07fb124c087b;Sampled=0 x-amzn-remapped-date: Mon, 05 Dec 2022 21:51:39 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 4ORpzqbzQyJz_i3wpxf_07mXK3ovj1JT8kn-M9fdrGRgDVig7hhN5w== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google date: Wed, 07 Dec 2022 12:20:15 GMT age: 31574 etag: "d51162b7fcba50022482b7130a556f3a7dfe822f" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6186 Md5: 535710165275856757bd7d1689f79de3 Sha1: d51162b7fcba50022482b7130a556f3a7dfe822f Sha256: c93e2df13b78cd4b718eb4fe3fe70a9d6d12fd0a0d7f505219ec0d5e6a70653c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11224 x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: csUINEwdoAMFuOw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0 x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: ViuPsZBEVJ-aGOcsfrl3nXu244mzMUMQVhpPeNlO7W3sBrrfuUfXpA== via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google date: Tue, 06 Dec 2022 22:32:04 GMT age: 81265 etag: "36082b7329d473829178f280cb71a83b1531e486" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11224 Md5: b15136d60fd0a5e0f657a4f5c75d540f Sha1: 36082b7329d473829178f280cb71a83b1531e486 Sha256: 79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8701 x-amzn-requestid: 653284c3-ee7f-45f1-9513-3a6c81e1d6e3 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cm3-2HRWIAMFjfg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638c39f8-6f8969a26787a9463ba6c2ec;Sampled=0 x-amzn-remapped-date: Sun, 04 Dec 2022 06:11:04 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: EpyIdH9YEXjxbGhZpBIfzoZHQxMvAKl0eCFQsgMt0e1SSeWsiuey7g== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google date: Tue, 06 Dec 2022 22:15:06 GMT age: 82283 etag: "ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8701 Md5: 604a4132da78a0c013b5818644adb121 Sha1: ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566 Sha256: eecab519c33596c67f2d2021dfd1af24e7fd8f2ed403f99b4ba0c265c08a259f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6557 x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cmcuMG6bIAMFUng= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0 x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw== via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google date: Wed, 07 Dec 2022 06:11:41 GMT age: 53688 etag: "08d241e56622cb900754d95bc5d58ed8826d9f32" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6557 Md5: 210b27f5f6310d8fad640acce3d9ae0e Sha1: 08d241e56622cb900754d95bc5d58ed8826d9f32 Sha256: 64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8351 x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cvlitFk9oAMFakQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0 x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A== via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google date: Tue, 06 Dec 2022 21:55:40 GMT etag: "b8eb2e11f9655f19334befc036f21489a6473827" age: 83449 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8351 Md5: 98d2cf29c710d25bd2f03ff216fdd369 Sha1: b8eb2e11f9655f19334befc036f21489a6473827 Sha256: 614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "26538090B698F40D185C2D041CDA6869152BF905CFB175C076ED1B5B4DEF10B0" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9047 Expires: Wed, 07 Dec 2022 23:37:16 GMT Date: Wed, 07 Dec 2022 21:06:29 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: e7fe569bfe1f92eb94273e15c11d7142 Sha1: 2d05636b6e15390cc5d761eb540c10ddb724c2c3 Sha256: 26538090b698f40d185c2d041cda6869152bf905cfb175c076ed1b5b4def10b0
GET /kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 HTTP/1.1 Host: televivo.online User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1 TE: trailers	194.135.87.58 HTTP/2 200 OK content-type: text/html date: Wed, 07 Dec 2022 21:06:27 GMT server: Apache vary: Accept-Encoding content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256:
GET /pfe/current/micro.tag.min.js?z=5225827&sw=/sw-check-permissions-f820d.js HTTP/1.1 Host: deehalig.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://televivo.online/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	139.45.197.251 HTTP/2 200 OK content-type: application/javascript server: nginx date: Wed, 07 Dec 2022 21:06:29 GMT last-modified: Thu, 01 Dec 2022 15:42:46 GMT etag: W/"6388cb76-9a87" access-control-allow-credentials: true cache-control: no-cache pragma: no-cache content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256: Blocklists: - quad9: Sinkholed

                                        
                                            GET /go/a1dd168f-6dfc-487a-a712-b00ff90aed53 HTTP/1.1 

                                        
                                            
Host: www.mediacdnc.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                        
                                             3.70.16.242

                                            
                                                HTTP/1.1 302 Found 

                                            
                                                
Content-Type: text/html; charset=utf-8

                                            

                                            
                                                
Server: openresty 

                                            
                                                
Date: Wed, 07 Dec 2022 21:06:26 GMT 

                                            
                                                
Content-Length: 736 

                                            
                                                
Connection: keep-alive 

                                            
                                                
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced 

                                            
                                                
Access-Control-Allow-Origin: * 

                                            
                                                
Location: https://televivo.online/kz/fortune/nl?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 

                                            
                                                
Set-Cookie: bemob-uniq-visit:a1dd168f-6dfc-487a-a712-b00ff90aed53=1; Domain=www.mediacdnc.com; Path=/; Expires=Thu, 08 Dec 2022 21:06:26 GMT; HttpOnly
bemob-rotation:a1dd168f-6dfc-487a-a712-b00ff90aed53:random:c95d25acb8e7d6602daf36d51e7e992a=0-2-0; Domain=www.mediacdnc.com; Path=/; Expires=Thu, 08 Dec 2022 21:06:26 GMT; HttpOnly
bemob-track-url=https%3A%2F%2Ftelevivo.online%2Fkz%2Ffortune%2Fnl%3Fkey%3DeyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%253D%253D%26ccc%3DNO%26ppp%3DPropellerAds%253A%2520Push%2520Notifications%26tdom%3Dwww.mediacdnc.com%26bemobdata%3Dc%253Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%253D138188af-9d53-4dff-b1c3-88e15e5f5249..a%253D0..b%253D0; Domain=www.mediacdnc.com; Path=/; Expires=Thu, 08 Dec 2022 21:06:26 GMT; HttpOnly 

                                            
                                                
Vary: Accept 

                                            
                                                
X-Response-Time: 27.024ms 

                                            
                                                
Expires: Thu, 01 Jan 1970 00:00:01 GMT 

                                            
                                                
Cache-Control: no-cache 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  HTML document, ASCII text, with very long lines (736), with no line terminators

                                                Size:   736

                                                Md5:    4c3d122976950670f4a09073128ebc68

                                                Sha1:   08cfd18e66efe25323d98855f9791e7715aec3f0

                                                Sha256: b2ead99f97b635b2830d7b1092573f89d6cb16614fbcb8304d745843c5edae20

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC" 

                                            
                                                
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=19550 

                                            
                                                
Expires: Thu, 08 Dec 2022 02:32:17 GMT 

                                            
                                                
Date: Wed, 07 Dec 2022 21:06:27 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    aea93551fa9deb76ae49a3b4019d64fe

                                                Sha1:   e3b8862057ebe839959228e42246d7b1807fc90c

                                                Sha256: 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103" 

                                            
                                                
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=10303 

                                            
                                                
Expires: Wed, 07 Dec 2022 23:58:10 GMT 

                                            
                                                
Date: Wed, 07 Dec 2022 21:06:27 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    00e7703bd74975689fc9050356aaca6b

                                                Sha1:   9788fe6a36d6f278e8da329ebc5dd87bcd212317

                                                Sha256: 593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "C99BCCC9064BFDE6AD1E5E536BF54917DF2010E914C3A9088E5F57F30C4AC4BC" 

                                            
                                                
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=15281 

                                            
                                                
Expires: Thu, 08 Dec 2022 01:21:08 GMT 

                                            
                                                
Date: Wed, 07 Dec 2022 21:06:27 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    fd981a64a308d95b20b837d4b27df092

                                                Sha1:   bf57714d09705179916667426c89a98d20edcd0e

                                                Sha256: c99bccc9064bfde6ad1e5e536bf54917df2010e914c3a9088e5f57f30c4ac4bc

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Wed, 07 Dec 2022 21:06:27 GMT 

                                            
                                                
content-length: 12 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
via: 1.1 google 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /kz/fortune/nl/css/amazon.css HTTP/1.1 

                                        
                                            
Host: televivo.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             194.135.87.58

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/css

                                            

                                            
                                                
date: Wed, 07 Dec 2022 21:06:27 GMT 

                                            
                                                
server: Apache 

                                            
                                                
last-modified: Sat, 03 Dec 2022 13:23:41 GMT 

                                            
                                                
etag: "13b9-5eeec5ce7a1c4-gzip" 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
cache-control: max-age=604800 

                                            
                                                
expires: Wed, 14 Dec 2022 21:06:27 GMT 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
content-encoding: gzip 

                                            
                                                
content-length: 1417 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  CSV text\012- , ASCII text

                                                Size:   1417

                                                Md5:    dba53cc75cf9b8c0386667ca20602f8c

                                                Sha1:   7c70f45df560bb70d2c058058a636eb7bf561e51

                                                Sha256: 2de04f53e640274cb22d3bf5d366e6aae7f8bb2eee272b7a3e78036f54b2e447

                                        
                                            GET /kz/fortune/nl/images/gift.gif HTTP/1.1 

                                        
                                            
Host: televivo.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             194.135.87.58

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/gif

                                            

                                            
                                                
date: Wed, 07 Dec 2022 21:06:27 GMT 

                                            
                                                
server: Apache 

                                            
                                                
last-modified: Sat, 03 Dec 2022 13:23:42 GMT 

                                            
                                                
etag: "3cf6-5eeec5ce94f75" 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
content-length: 15606 

                                            
                                                
cache-control: max-age=604800 

                                            
                                                
expires: Wed, 14 Dec 2022 21:06:27 GMT 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  GIF image data, version 89a, 100 x 100\012- data

                                                Size:   15606

                                                Md5:    573c467d7a0b1c4c009ba98927dfa335

                                                Sha1:   78d9c7efaeed568b74f1e4d1b4eb67e51dbbb9f1

                                                Sha256: c4f1d8867d03d437694f1cac0c9df3a7f5006fb8df474023bfa1d78f88843ce8

                                        
                                            GET /kz/fortune/nl/js/jquery.min.js HTTP/1.1 

                                        
                                            
Host: televivo.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://televivo.online/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                        
                                             194.135.87.58

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/javascript

                                            

                                            
                                                
date: Wed, 07 Dec 2022 21:06:27 GMT 

                                            
                                                
server: Apache 

                                            
                                                
last-modified: Sat, 03 Dec 2022 13:23:42 GMT 

                                            
                                                
etag: "1787d-5eeec5cec686f-gzip" 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
content-encoding: gzip 

                                            
                                                
content-length: 33369 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (32341)

                                                Size:   33369

                                                Md5:    a455443006938869e740a38df8640ada

                                                Sha1:   869bd24af8e61e2c6b23cf158853505d5fe7afc2

                                                Sha256: 685bd4372d5eca42e9dae6db1678618e08d2ca201bc4e7525adabc20021338b5

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 329 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Wed, 07 Dec 2022 20:07:55 GMT 

                                            
                                                
age: 3512 

                                            
                                                
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                            
                                                
etag: "1648230346554" 

                                            
                                                
cache-control: max-age=3600,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             93.184.220.29

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Age: 5051 

                                            
                                                
Cache-Control: max-age=134674 

                                            
                                                
Date: Wed, 07 Dec 2022 21:06:27 GMT 

                                            
                                                
Etag: "639057aa-1d7" 

                                            
                                                
Expires: Fri, 09 Dec 2022 10:31:01 GMT 

                                            
                                                
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT 

                                            
                                                
Server: ECS (ska/F70F) 

                                            
                                                
X-Cache: HIT 

                                            
                                                
Content-Length: 471 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    053aff7451e55d4269dd9610ab070f3f

                                                Sha1:   b3376256d11d159b0c7280ba1515b78d7d9e12ca

                                                Sha256: 24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1" 

                                            
                                                
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=8407 

                                            
                                                
Expires: Wed, 07 Dec 2022 23:26:36 GMT 

                                            
                                                
Date: Wed, 07 Dec 2022 21:06:29 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    1ab1615b2c8cc26b12fc0cf41734ff07

                                                Sha1:   a7d54b3709ce75a20210e20013e6f06b0aa88e2d

                                                Sha256: 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1" 

                                            
                                                
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=8407 

                                            
                                                
Expires: Wed, 07 Dec 2022 23:26:36 GMT 

                                            
                                                
Date: Wed, 07 Dec 2022 21:06:29 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    1ab1615b2c8cc26b12fc0cf41734ff07

                                                Sha1:   a7d54b3709ce75a20210e20013e6f06b0aa88e2d

                                                Sha256: 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1" 

                                            
                                                
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=8407 

                                            
                                                
Expires: Wed, 07 Dec 2022 23:26:36 GMT 

                                            
                                                
Date: Wed, 07 Dec 2022 21:06:29 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    1ab1615b2c8cc26b12fc0cf41734ff07

                                                Sha1:   a7d54b3709ce75a20210e20013e6f06b0aa88e2d

                                                Sha256: 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19ffa93b-2002-4f40-ab8b-aa163e9b5939.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 6186 

                                            
                                                
x-amzn-requestid: 53d1d373-ff6c-4c59-bdeb-fff592bca586 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: csUsyGOEIAMFwfA= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-638e67eb-0156077b52dc07fb124c087b;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Mon, 05 Dec 2022 21:51:39 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C2 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: 4ORpzqbzQyJz_i3wpxf_07mXK3ovj1JT8kn-M9fdrGRgDVig7hhN5w== 

                                            
                                                
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Wed, 07 Dec 2022 12:20:15 GMT 

                                            
                                                
age: 31574 

                                            
                                                
etag: "d51162b7fcba50022482b7130a556f3a7dfe822f" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6186

                                                Md5:    535710165275856757bd7d1689f79de3

                                                Sha1:   d51162b7fcba50022482b7130a556f3a7dfe822f

                                                Sha256: c93e2df13b78cd4b718eb4fe3fe70a9d6d12fd0a0d7f505219ec0d5e6a70653c

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8701 

                                            
                                                
x-amzn-requestid: 653284c3-ee7f-45f1-9513-3a6c81e1d6e3 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cm3-2HRWIAMFjfg= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-638c39f8-6f8969a26787a9463ba6c2ec;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Sun, 04 Dec 2022 06:11:04 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C2 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: EpyIdH9YEXjxbGhZpBIfzoZHQxMvAKl0eCFQsgMt0e1SSeWsiuey7g== 

                                            
                                                
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Tue, 06 Dec 2022 22:15:06 GMT 

                                            
                                                
age: 82283 

                                            
                                                
etag: "ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8701

                                                Md5:    604a4132da78a0c013b5818644adb121

                                                Sha1:   ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566

                                                Sha256: eecab519c33596c67f2d2021dfd1af24e7fd8f2ed403f99b4ba0c265c08a259f

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8351 

                                            
                                                
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: cvlitFk9oAMFakQ= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT 

                                            
                                                
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                            
                                                
x-cache: Miss from cloudfront 

                                            
                                                
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A== 

                                            
                                                
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Tue, 06 Dec 2022 21:55:40 GMT 

                                            
                                                
etag: "b8eb2e11f9655f19334befc036f21489a6473827" 

                                            
                                                
age: 83449 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8351

                                                Md5:    98d2cf29c710d25bd2f03ff216fdd369

                                                Sha1:   b8eb2e11f9655f19334befc036f21489a6473827

                                                Sha256: 614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac

                                        
                                            GET /kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcwNDQ3MTg2IiwiaGFzaCI6IjdiNjgzZjUzNjljYmExNGRkZmU4Y2NjNDM3MDU2M2Y3ZGVhNTc0N2MifQ%3D%3D&ccc=NO&ppp=PropellerAds%3A%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c%3Da1dd168f-6dfc-487a-a712-b00ff90aed53..l%3D138188af-9d53-4dff-b1c3-88e15e5f5249..a%3D0..b%3D0 HTTP/1.1 

                                        
                                            
Host: televivo.online

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1 

                                        
                                            
TE: trailers

                                        
                                             194.135.87.58

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/html

                                            

                                            
                                                
date: Wed, 07 Dec 2022 21:06:27 GMT 

                                            
                                                
server: Apache 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
content-encoding: gzip 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    

                                                Sha1:   

                                                Sha256:

URL	www.mediacdnc.com/go/a1dd168f-6dfc-487a-a712-b00ff90aed53
IP	3.70.16.242 (Germany)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access
Report completed	2022-12-07 21:06:37 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (10)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 3.70.16.242

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: mediacdnc.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (9)

Executed Evals (1)

#1 JavaScript::Eval (size: 80) - SHA256: 9dd9b6e6e579f4ae4a10de9483c14cff0f9b1c60d1a9e5a0307599c4b1b37941

Executed Writes (0)

HTTP Transactions (34)

Overview

Domain Summary (10)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 3.70.16.242

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: mediacdnc.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (9)

Executed Evals (1)

#1 JavaScript::Eval (size: 80) - SHA256: 9dd9b6e6e579f4ae4a10de9483c14cff0f9b1c60d1a9e5a0307599c4b1b37941

Executed Writes (0)

HTTP Transactions (34)

Network Intrusion Detection Systems