| infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7 |  54.230.111.98 | 301 Moved Permanently | 167 B |
URL HTTP/1.1infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7 IP54.230.111.98:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashf5d40b7259645010f9a248858ad14178 b3051d17a6ec8c9e166bf09a62b48261ab86957b 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7 HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Fri, 27 Jan 2023 08:11:26 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
X-Cache: Redirect from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 14wA5w3Qo8nwlA3rClR6yyzj6zYHdy4qsdYvRZNWZNQnxBvxnXgqPA==
|
|
| r3.o.lencr.org/ |  23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2405562765b49b2782ebd2e2994851d5 be7ac8e558f7875bb1fb86ab5ec674424a5ff269 422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2653
Expires: Fri, 27 Jan 2023 08:55:39 GMT
Date: Fri, 27 Jan 2023 08:11:26 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash5fe582397f3003b225cb9058e02c2190 68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f 238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2840
Expires: Fri, 27 Jan 2023 08:58:46 GMT
Date: Fri, 27 Jan 2023 08:11:26 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashbf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 07:35:19 GMT
content-type: application/json
age: 2167
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash69f73ac59327cd9ad7d99816ccfcc03e c54844f82dbee0d5ee4c8ce344eb0139373e6c6b e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9191
Expires: Fri, 27 Jan 2023 10:44:37 GMT
Date: Fri, 27 Jan 2023 08:11:26 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ce9r7JLcM/9eTQBKHqwlGsHD1UxXwxOjuK48F5CsVtffRce8vri/KGL44TrAxULAV5vYg4HO8sk=
x-amz-request-id: 51K7B854VEX5PZAJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 07:20:27 GMT
age: 3059
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 08:11:27 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.r2m02.amazontrust.com/ | 54.230.80.227 | 200 OK | 471 B |
URL HTTP/1.1ocsp.r2m02.amazontrust.com/ IP54.230.80.227:0
Hashd543732ffe5cadd884142be5c370e6bf f8d75f0292981e7ba63a46c14977d32dd01b367b c67ba1eb6347e02e72377a093f576249eea613d9ba8e3dacb02d8fb2e406925c
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=170383
Date: Fri, 27 Jan 2023 08:11:27 GMT
Etag: "63d37dbe-1d7"
Expires: Sun, 29 Jan 2023 07:31:10 GMT
Last-Modified: Fri, 27 Jan 2023 07:31:10 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oya3hute1o5SBjASIGpMwCUQ2BjMNL_NBbrxFfpKFVJ6ECuQUdankA==
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/logo.png | 54.230.111.51 | 200 OK | 6.3 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/logo.png IP54.230.111.51:0
File typePNG image data, 826 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash66f6c3c1b0b6756935c9b78fd2b46f81 3b31b38d59a9092e7133d85e60bb4bc09388159b 3e59d39670e8cea41609a46f1020d3e1282cb54fb574c0cf18e61e40f17e542d
GET /1em/za/cd133322letsketo/rightwing/index_files/logo.png HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 6314
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:00 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f0-18aa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: j4sY1FjB77JIbIkPoScSXm1AgabgzY7i6cpIaZ9phxgjtObUsPJzBw==
age: 3368
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/twitter.jpg | 54.230.111.51 | 200 OK | 5.2 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/twitter.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3\012- data Hash61ec707cf9b9a2bd7b80e6cfe8e2af88 f2b60f67acacbaebaf2193a362b4c566904c95cf 35131bde9a7316b260cfc1476f21ccfb63602db8cbd0bfefe49ee3fd955e117c
GET /1em/za/cd133322letsketo/rightwing/index_files/twitter.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5196
date: Fri, 27 Jan 2023 07:59:55 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:02 GMT
etag: "63b8a7f2-144c"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vCdJxj60we8kOJMcNw5vWfDuRNjQEbHUnVQJAj-0zrz-NJ8reROkdA==
age: 692
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/pinterest.jpg | 54.230.111.51 | 200 OK | 6.8 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/pinterest.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3\012- data Hash31c8ab1bd8f15096d8d113f87d6cd936 b420696931d0b75168e9f6770ee69a86e833db8b 44ab7e286060b55140b1c476e331c805826c029e9cf3232d52610e37bd666da2
GET /1em/za/cd133322letsketo/rightwing/index_files/pinterest.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6813
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:02 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f2-1a9d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vTU1i5ySTOwuZ82NzscIMHV7PQw8x9-ElTWyT9r4inBGYQO71UquGw==
age: 17551
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/email.jpg | 54.230.111.51 | 200 OK | 5.7 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/email.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3\012- data Hashced719dd24b6201c18a82024d3d96421 3bd7a14cf1d48a70327d3258dfe641127cb7934c b3e405463df645e7a10867ed21bffd56aedd5c6d410a1196dee30bc4d5fcc4c6
GET /1em/za/cd133322letsketo/rightwing/index_files/email.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 5710
date: Fri, 27 Jan 2023 06:53:26 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:02 GMT
etag: "63b8a7f2-164e"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7CiLB94jrBtf_y7aIFs_o16EAnL6BeeU3gUa4YeeDUtSsf5jY2t8WQ==
age: 4681
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/aunt.jpg | 54.230.111.51 | 200 OK | 46 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/aunt.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x412, components 3\012- data Hash32af8bcbe32f0d72a2a43c6d9f4fb0ed 41e69a53a2a5cabd9098ff1828ce83db46b45ebf 4cedce6455106d4a5b9c6fb83fd306369d9255444b1efb7c020c5d4147953d27
GET /1em/za/cd133322letsketo/rightwing/index_files/aunt.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 45469
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:02 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f2-b19d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O6DQjyDRB65dpZAyRCFUvSQyYH_UD2HcQ8h1mzrVQyZQmgv7Ri4BVg==
age: 692
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/neighbor.jpg | 54.230.111.51 | 200 OK | 72 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/neighbor.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x309, components 3\012- data Hash60dd6ca6e9f6b66fc4481d042b1298fe a0975400c5794cf5fde0d3e11581f49ebfc5b9f3 11589137369a77e46e890b87a9ce95eac104f8506270ec9474c59de6959ee9fc
GET /1em/za/cd133322letsketo/rightwing/index_files/neighbor.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 72011
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:02 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f2-1194b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KUaDBo_AhuECXh52DkHK1orrFLR3EBnnpsNaZifMlK8_y-c9BrvEzw==
age: 17550
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/fatemily.jpg | 54.230.111.51 | 200 OK | 55 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/fatemily.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x600, components 3\012- data Hash1a35afad6fd70471aac23411aa8f2d9c 941f0dd0fdb9501e1746324c2105e15b899674c9 d3600b0b1e96476fc7b090c8b0430c5a9556a1e7db25acfb650a212afbb44413
GET /1em/za/cd133322letsketo/rightwing/index_files/fatemily.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 55178
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:04 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f4-d78a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gD2_8NLSGuLpXzob_mG8MCHDO8spmYy33XAWMOb9ZXbcsMbfn4rQ7g==
age: 4681
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/labscientistresearch.jpg | 54.230.111.51 | 200 OK | 38 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/labscientistresearch.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x402, components 3\012- data Hashcd2f989d0928113f56bbbed0203c8af5 c0aa8b0918451cb1e15fbdc8f3c99ea3d8ee62f0 119a5ffe37d51b64529a6707c1adfc777bc589012bfec0c68b5b1a29769c0095
GET /1em/za/cd133322letsketo/rightwing/index_files/labscientistresearch.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 37571
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:04 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f4-92c3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ezB_Pkpi6GQRaERHfhOtvEJsxyC8mp4aTCfD9ZcwD6aSKPrICZe2zA==
age: 4680
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/gerald.jpg | 54.230.111.51 | 200 OK | 33 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/gerald.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x412, components 3\012- data Hashe0630bb5b318e9f91f527f6241530939 274d2324df972456a8761313a9debafa54cf5e2c 844021785325000abc9208dda988ebf5fe069e383cf3f343e6d31778d0ac8dc3
GET /1em/za/cd133322letsketo/rightwing/index_files/gerald.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 33098
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:06 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f6-814a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4z5KHxqbf3t18SLzzgpGstFho20vIBf9Aiu6bEwxDSqWUC6mlGhFTg==
age: 4675
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/createDate.js.download | 54.230.111.51 | 200 OK | 752 B |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/createDate.js.download IP54.230.111.51:0
File typeASCII text, with very long lines (383) Hashc4f096f7bc691e43f3cedbf6606af607 2e2b683fd079885a09be5267602b1216f4d0ec2c a4a6f821f3aaa5a4f041dbbd7a664eab0cb56e3dc6d354e4678fc27d51338599
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /1em/za/cd133322letsketo/rightwing/index_files/createDate.js.download HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 752
server: nginx/1.20.0
last-modified: Tue, 03 Jan 2023 14:45:10 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b43f76-2f0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bF4157wQlGwVBf8VfcnYS4PMSGkHKcQ7XxGsLBXKnoWgNHluoncjpw==
age: 4692
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/stan.jpg | 54.230.111.51 | 200 OK | 49 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/stan.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x412, components 3\012- data Hash5e1005546ea0691d613ff98708c7adb5 7ff8ac692a5f834d5de21af2fca8af88cf6ef07d 901fc13966f3152681f1c35fce4e0a59786243d441a0b222e7cfd75b411775e4
GET /1em/za/cd133322letsketo/rightwing/index_files/stan.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 48995
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:06 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f6-bf63"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KGYHvuWz7WgKbYwmt-GpHEaVoLD9U7iADESmrxD3Hd0vgv-Xr2gKAw==
age: 4673
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/lowsupply.jpg | 54.230.111.51 | 200 OK | 37 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/lowsupply.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x321, components 3\012- data Hash3c34a58109e75a1e804ccb013b8a71ee e330e5eddbcf0ac99da2a324d8f951b7eb66018c 3177a76f5e12cfbeee7968be312f0a0e84bec0d58e80975940b40adcba090740
GET /1em/za/cd133322letsketo/rightwing/index_files/lowsupply.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 36590
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:06 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f6-8eee"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zoIcssg4iuyfkS7UEx2WYk5rnmR041r-YEhvPSZJv36O8CK2Xj75Eg==
age: 17547
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/harvard.jpg | 54.230.111.51 | 200 OK | 62 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/harvard.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data Hash283472a9e63b559bb5ecae29d369b3fd 8df4b1d8aa823c25d751a3ffda0bcac704ea1b4b 2593fde504bb2348b9e5c3bb2df98cddbf55d00171946c748de4aa6e9a1e0b05
GET /1em/za/cd133322letsketo/rightwing/index_files/harvard.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 61583
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:08 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f8-f08f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XFLetYM3YuID8Q-o87Hin5-on8eYdSAKFEbOPoUbpQF_TW7tup3frA==
age: 4671
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/diane.jpg | 54.230.111.51 | 200 OK | 43 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/diane.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x550, components 3\012- data Hash71e15812aa8d6cd16500a8252346f281 18d1e676913bdac48d8dc03ba3a1dced286ef162 181b1a37b1f0ef612ec2289598d4d5914c6f31c04452f2c442ca38d5d7c25208
GET /1em/za/cd133322letsketo/rightwing/index_files/diane.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 42812
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:08 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f8-a73c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oQo1DPgQLtkOXU7AclwM25UFiauIRrUkaxmDr2KZqUqcorEPSMgp6Q==
age: 4670
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/melissa.jpg | 54.230.111.51 | 200 OK | 50 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/melissa.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x550, components 3\012- data Hash0ad259903eb5b1ca548b57184ad97f81 783dce2d76f9a111769c768d8626bb3e6a199f3c c71e20a9d11f283bcb509727323b7e9034d007638b29027c0aa49e5628a1130b
GET /1em/za/cd133322letsketo/rightwing/index_files/melissa.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 49643
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:10 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fa-c1eb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PuuMvDeHKT9DeONCgN23E3kigGonuH0Z2E7jUNp8gd9YwnL4S6sBGg==
age: 687
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/kasey.jpg | 54.230.111.51 | 200 OK | 37 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/kasey.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x412, components 3\012- data Hash205db124853fab393a9b7d0b45a3c8c1 005b53ffed454a6a36289b2c8992d8e904b28e05 2549104b518d220a4d29b65dd369b23d7dc734fdffc58ec70825642c3303135b
GET /1em/za/cd133322letsketo/rightwing/index_files/kasey.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 36724
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:12 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fc-8f74"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XmFZ1m75Qu_m0F0kf_3rOu5C6evG-aGegON_L7rh5UxECEhxygux-g==
age: 4667
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/allison.jpg | 54.230.111.51 | 200 OK | 49 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/allison.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x550, components 3\012- data Hashfe18c0c08c6169685e101c3f7b110344 67079ae8935a7866da52b969f5e2b72008588adf f57ce6f7ed9d0e0abb6843ef9521f0d8e3b99973f15af29d49cb02104d6ee744
GET /1em/za/cd133322letsketo/rightwing/index_files/allison.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 48664
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:10 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fa-be18"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CcdDuiwt8KPFkak-4xToI5oVDl2UvadzVsyicRJvjy0Q2wFb7ZeUuA==
age: 4667
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/linkedin.jpg | 54.230.111.51 | 200 OK | 6.3 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/linkedin.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3\012- data Hash88ed4566fb0295351d5d7f1eee42fa20 a76d8f6486cec8fcfadc7a2617febb4250721a23 4e07111226a08dd9f9716c3b2eedf94af7d31db00485d0e519d842ac9c16ae14
GET /1em/za/cd133322letsketo/rightwing/index_files/linkedin.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 6321
date: Fri, 27 Jan 2023 06:53:25 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:02 GMT
etag: "63b8a7f2-18b1"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PjbQ8WG5R_eMUUFf_WTA_URiHSy2-fM7RgW8PAaggkLQvvYbeFnO_w==
age: 4681
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/marie.jpg | 54.230.111.51 | 200 OK | 48 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/marie.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x553, components 3\012- data Hash594dc02e67281006cf12277c27bc6511 9d6fe41c569c746fa31f23844ef627ed8536ccd2 51ea21b978ec6deb315797c35fd0a90e8dbb5c34b204bf5cd0f8fd91b0b612a5
GET /1em/za/cd133322letsketo/rightwing/index_files/marie.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 48348
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:10 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fa-bcdc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ERtCArWz8nIhFTfLZn3dAZNTpOOiVe0PKNJX_bdMoUOnZYvhpzx-bg==
age: 4668
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/megan.jpg | 54.230.111.51 | 200 OK | 70 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/megan.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x366, components 3\012- data Hashe64c17399ae263f4f3639e985cad702d 698ad7d86cfb18dd63efbe01f5ba5450773ac8e1 a16750ce377be6a313e3f9d1032643298a80fc5646043b0965fb9b33f8ba5c9f
GET /1em/za/cd133322letsketo/rightwing/index_files/megan.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 70004
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:12 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fc-11174"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PYZfIUozn6CAFikIx96Im3S8tn9bZvI3AoK7ubZczUfw32U5qsOZvQ==
age: 4666
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/books.jpg | 54.230.111.51 | 200 OK | 52 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/books.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data Hash081c9ed6f241d1d6d6f7c969b390e783 bc00f7431e6d8eba4fafa236161380bb69aa32d9 182347139553354a97583f05ba333d5573abddc193e7d64056761b440f1b226d
GET /1em/za/cd133322letsketo/rightwing/index_files/books.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 52126
date: Fri, 27 Jan 2023 00:08:45 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:06 GMT
etag: "63b8a7f6-cb9e"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VP8CQGIse3AGs0ne1uJBe3ibgrEwhsA2Ks4oARq_mxrPwHlLX4VhGw==
age: 28962
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/kelsey.jpg | 54.230.111.51 | 200 OK | 41 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/kelsey.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x550, components 3\012- data Hash4cfb2f4a468e91b6ea5456f88cb6f586 a6765b2956fcdf061ddbfa827661226f61d93360 93d988b827bf5b77d8977c86fa8a3083b4d4fec90c86f21472a152ce08a99be3
GET /1em/za/cd133322letsketo/rightwing/index_files/kelsey.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 40824
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:10 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fa-9f78"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5u9oH3h3l5wE6QG6iISFa7A7F0BKHxbYj79Czu0zAh9hNMpZpcV4MA==
age: 4670
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/checkmark.png | 54.230.111.51 | 200 OK | 558 B |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/checkmark.png IP54.230.111.51:0
File typePNG image data, 18 x 20, 8-bit colormap, non-interlaced\012- data Hashd2fd9aad8225e870e718c37d25d7e9e0 72b93a14c6c7ede126bf449a35bd549061d9a192 31825b853e17fdd1f53cd0ad03626a9dd108418a0b91293a67d559d4563bbcbc
GET /1em/za/cd133322letsketo/rightwing/index_files/checkmark.png HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 558
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:12 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fc-22e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iuo9_SdDzYFFrIp5CzRZDs1XajwOXt5IG1kyEaFWgC_joUfP2uyaCw==
age: 14489
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/gary.jpg | 54.230.111.51 | 200 OK | 64 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/gary.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x550, components 3\012- data Hash6ecfedbab54aeba9a5a67fbfabd6ee26 c4cda0fe28416b87891d2ab1f09173be9e05d7b9 181853d4e973fb155e55bf295a52fa4e13564de93ca729bf53cd0bbfd50c2ee5
GET /1em/za/cd133322letsketo/rightwing/index_files/gary.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 63776
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:12 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fc-f920"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BKwww3GDb8Ep7LQHHxgFbcgIAG4WU7QBvPrdCUAlhisLXKUQuPa0rQ==
age: 4667
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/wheel-cursor.png | 54.230.111.51 | 200 OK | 4.0 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/wheel-cursor.png IP54.230.111.51:0
File typePNG image data, 158 x 158, 8-bit colormap, non-interlaced\012- data Hash408f32b3c6cb30c11f0b397d38efe776 920c7f32c35e7e79af20771af958adc0ef1a5e14 03c3e2c023d778006ec0e105af5c5455054bf87815a79f6eb5cb9a19e883ac31
GET /1em/za/cd133322letsketo/rightwing/index_files/wheel-cursor.png HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4023
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:12 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fc-fb7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w-1TPhbW211zeMxS0jAmLXB2jhjcY0mtHiQHd3EKs4E2g6i4LKtnPA==
age: 14488
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/hero.jpg | 54.230.111.51 | 200 OK | 66 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/hero.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x550, components 3\012- data Hash4aec5069a5550931e7b0cbf90e1ddfca 61d78d9720aa0212c2dbc11d8124fa4729727bc4 969d58d9f2176314e26ee4e27dd8dab1adf4505cedc6ca707ba850f18b1bce68
GET /1em/za/cd133322letsketo/rightwing/index_files/hero.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 66489
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:00 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f0-103b9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HexSlKuP0LV-vqKiGVqvpTiiRQKVMl9Kx4I62VO6UuP2R-g0tcWl1Q==
age: 692
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/loading2.gif | 54.230.111.51 | 200 OK | 37 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/loading2.gif IP54.230.111.51:0
File typeGIF image data, version 89a, 70 x 70\012- data Hashc26c3f849a5b578ed5494ade3dfb6837 add1f2224f425c034f040973e83edd798f0727a9 3dfebea695e74f95113339686c6167ecd8e05afb20d69e3fd74d2acc8689e39b
GET /1em/za/cd133322letsketo/rightwing/loading2.gif HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 37009
server: nginx/1.20.0
last-modified: Sat, 12 Mar 2016 19:28:38 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "56e46de6-9091"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XxSlCK-7_vwu6cVpfpygeioRh-8Lzmadw2CAuSs1HtfPd4Vq9VfXyA==
age: 14489
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/emilyresults2.jpg | 54.230.111.51 | 200 OK | 61 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/emilyresults2.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x550, components 3\012- data Hasha9cd8b9f34612ff4e59bd2cdc170714c a7f76cd6dd8abb119f7c5511b01d333729cb6ac5 50773eb3a90b36d4e31546b613af717c2e31081b68363669e40b06443c3de6e6
GET /1em/za/cd133322letsketo/rightwing/index_files/emilyresults2.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 61174
date: Fri, 27 Jan 2023 06:53:32 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:04 GMT
etag: "63b8a7f4-eef6"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ebGLeJObZoR5Lxx62HLhtsjekpINDmElA8IugWLzS1wDlU--flZibA==
age: 4675
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/brain.jpg | 54.230.111.51 | 200 OK | 60 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/brain.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 560x370, components 3\012- data Hash413f903b630070333c07a7d4c297a8b2 7e145e369262a751bfed87cc3b5161f9b1486c2b 78680aad748df7f28875c87093d6859d88b7d6cd66c30d1881deb5384fc9fcd3
GET /1em/za/cd133322letsketo/rightwing/index_files/brain.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 59464
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:06 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f6-e848"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xpNpD86rKHoEwbwhb0DDurPNVvxvYNTju7txWwR2jX63hQMg28636Q==
age: 689
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w8.jpg | 54.230.111.51 | 200 OK | 4.1 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w8.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=@ Andy Rya], progressive, precision 8, 100x100, components 3\012- data Hash310807145f414fd3ce677e9682d766c5 76b09282162296a1e0b5d2f75ee4295d9626d86d 153fde311cf697ee4ed9842b43a4cf4274147fa6d821d43d15fc9b3961e14d49
GET /1em/za/cd133322letsketo/rightwing/index_files/w8.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4061
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:14 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fe-fdd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QwrxiSPd5Glb16cT8VWDBbfjv3mR8DxfBaaTynkzSeJ8MXvezbDcFQ==
age: 14488
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w5.jpg | 54.230.111.51 | 200 OK | 4.3 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w5.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Malandrin], progressive, precision 8, 100x100, components 3\012- data Hash43ddf23bddd57027c8d83893753163a9 4d6e81604353cf880105c94ce68faa266f5f0892 eba338d506b2e46f4495b8c46146521963979ae4b5b2874ab3c6960fa037d7fe
GET /1em/za/cd133322letsketo/rightwing/index_files/w5.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4269
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:12 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fc-10ad"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LnAvmLr9EI3PJZtUzfEZdLVraJCpGhp0O9PnNGRvVo-IsxN5-tdzoQ==
age: 14489
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w10.jpg | 54.230.111.51 | 200 OK | 3.9 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w10.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=Shannon Faga], progressive, precision 8, 100x100, components 3\012- data Hashf62f18e432f9aa86ec83a73b9910d505 6e86c3e10f9d72f349fb67431b5b1ad9d4790d92 16d62706524dc8f142f894dd144bce2698aeec96da136368e900775201e7625a
GET /1em/za/cd133322letsketo/rightwing/index_files/w10.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3859
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:14 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fe-f13"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4VWlY6uMv7wrX2wcUlfwP5B58A3TZOodS0PwI9qT8-n_0fQ6PD3A6g==
age: 14488
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w9.jpg | 54.230.111.51 | 200 OK | 4.2 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w9.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hash53adf17f98353c25a3acb6e0dee5da2a b4e9488de113e4df1c3d5ed6dbdd84e5feaa6a74 42145e1384371aa316a91e785c5133c6b5927d3d7e370921fc9124ca98b1f7b0
GET /1em/za/cd133322letsketo/rightwing/index_files/w9.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4173
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:14 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fe-104d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6r97tJA5Y-vATGnCvZFdzofUKTLmmJ13ABtIBKW0OulZrne9pva3GA==
age: 14488
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/12.jpg | 54.230.111.51 | 200 OK | 18 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/12.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 500x366, components 3\012- data Hashaf7af76c46ba68db7fb27561d6352b2d 9f65a90bc362a7b539c006c79ac2ee8d04170569 648c2d861962adc897ecf0769655063ff698692a1de59446fdf993d5e3b30d71
GET /1em/za/cd133322letsketo/rightwing/index_files/12.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 18051
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:14 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fe-4683"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: A5-1kCCWOHAUVTDUvlbLMHSckyjFKIqfU3A6BYEInhbuIsudHfht0w==
age: 4666
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m5.jpg | 54.230.111.51 | 200 OK | 3.7 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m5.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hashd272d0596ca1af82f124c427326901c8 c06df7c22097c01a27c89d81f17fe6218645cc2b 9df78e164b0f2944e2715bbf1a0314a92a627e301b91eec5ffb0cb02e3d6590c
GET /1em/za/cd133322letsketo/rightwing/index_files/m5.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3679
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:14 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fe-e5f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3bwI5Hj1QmA672-nzs-IkUFdPKN3fedqSLxdyp0u61kYD69ZI6zneg==
age: 14488
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/13.jpg | 54.230.111.51 | 200 OK | 22 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/13.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 491x387, components 3\012- data Hashaecc4d19d2157ecdaafe428001ebfb12 ec2b87007ddb49ce65fea0f24496edd600334d2f b8337129ebc13345b1394adbfeb9e0dae3a4ae4d34bb6d60961e440e8dca52c7
GET /1em/za/cd133322letsketo/rightwing/index_files/13.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22136
date: Fri, 27 Jan 2023 06:53:41 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:16 GMT
etag: "63b8a800-5678"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tmDfrFxxrLs34Apw1QnHRptqcr1CHsX9eoC33-A6LSyPvc9oW_r3Kg==
age: 4666
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m6.jpg | 54.230.111.51 | 200 OK | 3.8 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m6.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hash60266e323c5c4b5310415ed23c70aed0 5c220247753b0c5a6e31fbd61b397cdfa98d7b25 b0ede4d7d51f477e72018884446347c4d5b47273cf1908069489f5861551c467
GET /1em/za/cd133322letsketo/rightwing/index_files/m6.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3774
date: Fri, 27 Jan 2023 04:09:59 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:14 GMT
etag: "63b8a7fe-ebe"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eMzEm7jOTJVweacmB0J_NpztnTBsee5XLzo-E_GFnCU4sGYFfCOY1Q==
age: 14488
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/14.jpg | 54.230.111.51 | 200 OK | 26 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/14.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 434x432, components 3\012- data Hashbe382c6ee1fe1fb88c8c95402f560e6e 4ed32d465070a14276bc938e889a57076676e54d 1e43836c4d86868d4b2a16b2626246332bfea1b7ab7312763f65de05333e3b85
GET /1em/za/cd133322letsketo/rightwing/index_files/14.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 26272
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:16 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a800-66a0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hjAb7p0hb_gTMlWr-SCglpp8zj8tv21l0njzQhD5JAVp3-oIfBKadA==
age: 14488
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w11.jpg | 54.230.111.51 | 200 OK | 3.4 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w11.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hashf0c9f4f3597c8ab51fe2b75ba67da7e2 c53638d73b0a94f3d291eeda9d9080dfe5d2d6a0 fba342c8f09b00b1c8ba93d00414f38d68966d46fcfbb97292f80b95d708f25d
GET /1em/za/cd133322letsketo/rightwing/index_files/w11.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3424
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:16 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a800-d60"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yk9058h-Ga6xbD-RVh535NHfiJzMf0Px78mcGJd-yggSnEgpKhO9tw==
age: 14488
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w13.jpg | 54.230.111.51 | 200 OK | 4.3 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w13.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hashff36c1b834b389d250b696503d127cc2 129408b6184c6ee42af65557bb82650255f37ca8 1546171c9c20c9033931a22f7fcf9a9611f914e1cbed24a47a74c2ec2471e38b
GET /1em/za/cd133322letsketo/rightwing/index_files/w13.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4330
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:16 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a800-10ea"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c9g_0oSHz2j0z8kPqq3WM7i7hLWW_R3d7c0HnFdJnQ_6Qy103oCmrA==
age: 14488
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m7.jpg | 54.230.111.51 | 200 OK | 2.9 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m7.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hash7fcbd5b80427d8f3c49d04e3d074ff0b 34d95cc6644af9b65a7fceb363480fde5dfd2264 37e8c51a3da047cc0d3066c59d28ac2c71417d4ba2053d791e078e083ce03535
GET /1em/za/cd133322letsketo/rightwing/index_files/m7.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2905
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:16 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a800-b59"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: remJJMblWNMW4oW2G1m9xASOD3HM-cABCHNlf0IhC_5iEFtl6X6bWA==
age: 4666
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w14.jpg | 54.230.111.51 | 200 OK | 3.8 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w14.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hash6507888ae6d9430d4fb89bb8150d5e2c 197f356beb86b1a9c02a13a5da7bb8958033b21f 7ddc1d04dbe172aad7d492cc63729812276d333ff817c8b37bb515f1d753cbe9
GET /1em/za/cd133322letsketo/rightwing/index_files/w14.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3835
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:18 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a802-efb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KZ_RbDiOzZza239H7r7-CPpHSMUm1UeNSk2kgD4TDlZB0l8sB4D_nA==
age: 4666
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w17.jpg | 54.230.111.51 | 200 OK | 3.6 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w17.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hash807365f9ce614fca0b922fdf506d785b e211300d271174823f2eda4692430d0bfb142128 92c7c2be91299c0d18ef730d145a65786910fe543c2b163ef35d5f791520ece2
GET /1em/za/cd133322letsketo/rightwing/index_files/w17.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3582
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:16 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a800-dfe"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: g6YyefnLRZS2QiRcQBnYzFGx-jAlr5AWc1yhAUCRYSJtN2yktNjKHw==
age: 684
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m8.jpg | 54.230.111.51 | 200 OK | 3.7 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m8.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hash5df9867f4c7d88e6b79076bac5e4adb2 959c616120152bfe15d9480fa7b5fee74bcbb0d4 41ca93954f0791d59d3af13fd1ee4769402542c571b07528e3b40fd895fee33e
GET /1em/za/cd133322letsketo/rightwing/index_files/m8.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3652
date: Fri, 27 Jan 2023 04:10:00 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:18 GMT
etag: "63b8a802-e44"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CfsXcqvJBiyP7PGo7LAdj2gb2l-IX4zJc__xlsnbkjGtFjnzLfr2gA==
age: 14487
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w15.jpg | 54.230.111.51 | 200 OK | 3.8 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w15.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hash5a70ed6bc79261e4f2be9f0f91a9a876 7908dd78f660babea09dc6db3cf9c600dff05297 0e3635ba2409cff5f394b3f66d067d9a1a53bdb0f1d6996023a2ac8880fcab46
GET /1em/za/cd133322letsketo/rightwing/index_files/w15.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3755
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:18 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a802-eab"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: thDpDSMbuoAq7LhjjhtRq69ekfv332JYXcYgGTdqBqOk7163QNyvNA==
age: 4666
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m9.jpg | 54.230.111.51 | 200 OK | 3.7 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m9.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hash9fed7b43c184c43fd0270dd9b4717b3a 613111b07acedd878dfb2c6b09975573d07b0ce5 ba203ee713b9747d016d8009d781839af2e6be0dd1a3d64071f30e9257df2688
GET /1em/za/cd133322letsketo/rightwing/index_files/m9.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3723
date: Fri, 27 Jan 2023 04:10:00 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:18 GMT
etag: "63b8a802-e8b"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RSfsg0RSvnM4-NolCegdmHbxDk2ZK1LympGvHjOhaUJKzwXMpXGVrw==
age: 14487
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w16.jpg | 54.230.111.51 | 200 OK | 3.4 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w16.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hash79cc8c4e7fef0741255b9253a4164dae 7366d65093f18b7a58590d53cfa8696eb52d0c56 f2773d8a173fd9711a104e1c2f3c12493a01ca33a7bdfa06382d1cae8c0d6c0c
GET /1em/za/cd133322letsketo/rightwing/index_files/w16.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3404
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:18 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a802-d4c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3hZHi2-U-LoXuK72v9TEZlf0EUt1mcqnMLGizhm8x8p7AO6lIBjbgg==
age: 14487
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/womanspeakingonstage.jpg | 54.230.111.51 | 200 OK | 28 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/womanspeakingonstage.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 600x399, components 3\012- data Hash049a775082fa282ec5a03d5e6ae41934 c45c258243826437042b7a62445a4541568e80dd 5e57dd059f309efcfb5be5d54fdf671910fb0657193ba66f6c588f649056a550
GET /1em/za/cd133322letsketo/rightwing/index_files/womanspeakingonstage.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 28001
date: Fri, 27 Jan 2023 06:53:26 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:04 GMT
etag: "63b8a7f4-6d61"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zjbaNIPVHu0MqdbyC_0NsrwQfO3QdFGA6zFTc7nmX9z4tLS58Cj13w==
age: 4681
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/main.js.download | 54.230.111.51 | 200 OK | 1.0 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/main.js.download IP54.230.111.51:0
Hash5e08f7a90b814bcf5c5577270105cd04 69244d983720b51d3b1480725d3d62c7cf20898e ed95ea25339a4af2634ce75cad608f2b01be15dae4525d8e776338bfac90d102
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /1em/za/cd133322letsketo/rightwing/index_files/main.js.download HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 1036
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:18 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a802-40c"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KTwWVGMsR6_2AcSSBiwmP68LMP8zV7VHrAjch1CKNLyrLb2v_LRKvw==
age: 12142
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/molecule.jpg | 54.230.111.51 | 200 OK | 22 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/molecule.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 600x338, components 3\012- data Hashfdaf21d800b375bb2e9a2a7888c06ce9 af94fb3ec6bd1bd567606f9c0c6d1d61ae8d36d9 6b816ca32278f0e120fc517d599b77667f717b9efea2d6865ee24a454698e874
GET /1em/za/cd133322letsketo/rightwing/index_files/molecule.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22436
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:08 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f8-57a4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5dODSEyyItt3F2FYNqAWjlzQWWZymrOcrTKiYQqPIhtMEfOP4xdSgw==
age: 4671
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/prizewheel.png | 54.230.111.51 | 200 OK | 24 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/prizewheel.png IP54.230.111.51:0
File typePNG image data, 481 x 481, 8-bit colormap, non-interlaced\012- data Hashd78d1407ef984d6fb1a8793f50eca542 fef936df1b92931495e9d1d503602ae5f9199563 33ff5806763402eadca447d90de3d273f4ccf234b0c99660a3b0bb6df21a1bb2
GET /1em/za/cd133322letsketo/rightwing/index_files/prizewheel.png HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 23698
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:12 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fc-5c92"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: i9FEJjHmiVxUvPgRn99J96-G9m9pyIc4f5lZq-3etBAMz2g6axYPKQ==
age: 4666
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/facebook.jpg | 54.230.111.51 | 200 OK | 5.0 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/facebook.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 250x250, components 3\012- data Hashc65953a2eba408acf1411998ae5ba678 1cfab943944807898016b0c44a81ea667e7b171f 5aff1f826774c8f6aa294c67f5817f7aca99534e2759563333f9db08f535d4d3
GET /1em/za/cd133322letsketo/rightwing/index_files/facebook.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4958
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:02 GMT
etag: "63b8a7f2-135e"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Nd2A6o6ZPq33BYXRqtwOfwh70zLb_twm0C8HzOdqOMGUsV_hJO8F-A==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m10.jpg | 54.230.111.51 | 200 OK | 3.7 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/m10.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hash302ac497209611461c110bdf7c12e1ca f284a9f3e92c73b9af3f733393bfe632adc31c90 df64a35f4aa103a162e7351c76a06a61e2e23bd033a376e371e491afa3c4efba
GET /1em/za/cd133322letsketo/rightwing/index_files/m10.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3664
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:18 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a802-e50"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lgr0btgawuN2o7RN9TvNEN80lpHQciP6QtOgdPNb1F0-Ngsh2lqlDA==
age: 14487
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2ebcc7cd4c50e87a984668828c1e612e f693d36335f333e3647f9fb2460e34dd73e17421 27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 08:11:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2ebcc7cd4c50e87a984668828c1e612e f693d36335f333e3647f9fb2460e34dd73e17421 27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 08:11:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2ebcc7cd4c50e87a984668828c1e612e f693d36335f333e3647f9fb2460e34dd73e17421 27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 08:11:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/emilyresults1.jpg | 54.230.111.51 | 200 OK | 72 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/emilyresults1.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x550, components 3\012- data Hash07d6fdf5de8af4445c96ed69878b400b d2c764773938ac45a56523206e1162692fc04c48 3631b579d4c84710bbd4ff586e256d1b900dfb810dc4c25bde0671ce36f56fd3
GET /1em/za/cd133322letsketo/rightwing/index_files/emilyresults1.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 72335
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:04 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f4-11a8f"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XFQeHRv0myfu4QtGS8nVIiXVYZoHGfK_sCl-BL1hg2ah2Vkcns6z8A==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/harvardlibrary.jpg | 54.230.111.51 | 200 OK | 73 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/harvardlibrary.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x768, components 3\012- data Hash9a5db72f68579a724f2225147fc4e9a9 0a917445653fa88c878348987574af9909be0717 ae9fae4bd33e8b446ae6a7a72e9e02fda6b6e1a6d0e8dcb6c674f45f513fbca8
GET /1em/za/cd133322letsketo/rightwing/index_files/harvardlibrary.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 72810
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:04 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f4-11c6a"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Pr3_W0RuTVQfP5KnI9vA3cgkOoI9_FPUgKz5HWlMtoiAOsJU1UtuCw==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/weddingmom.jpg | 54.230.111.51 | 200 OK | 71 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/weddingmom.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 650x650, components 3\012- data Hash5eac4db9317dcf597c83ea7aae681ceb d20c30fd05730867f583c7063571489704af6c00 17b5fc903b5696bc7182ed7b1893820079e843952892b06ffd498a35b688a8ba
GET /1em/za/cd133322letsketo/rightwing/index_files/weddingmom.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 70561
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:06 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f6-113a1"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eI4QpgPvLgymNmai63H24brvZgcZvShXt604kHUIB_6Z9-de5K5cPw==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/businessmenwithdoctor.jpg | 54.230.111.51 | 200 OK | 29 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/businessmenwithdoctor.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data Hash530c81848aec77d39d4eff1161e76f4b d989521a1b861777853c61502519b404e94f22c9 6cca3930ea394b960ca6309db43d5388008224059da53831741d884bb2141cb5
GET /1em/za/cd133322letsketo/rightwing/index_files/businessmenwithdoctor.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 29064
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:06 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f6-7188"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fKMib3lswXLJVdUNK2Md9fTy4WeZfGInEEoih6ZDOWFzHNQkLJSj8w==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/traditionalketo.jpg | 54.230.111.51 | 200 OK | 42 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/traditionalketo.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x416, components 3\012- data Hash7d89abe999428c70fa7e895f29159bea 6008b71695e95ac6ece45e5bf641b01fcb1f3727 cbcab4ffd82cb70d429d3a6be85c3eabbb6e944a6484d261c88afea7239cec01
GET /1em/za/cd133322letsketo/rightwing/index_files/traditionalketo.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 41929
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:08 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f8-a3c9"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DZOKQVzB5l56BtPvz87dQ9TCUWcp_Lbpx0XzZqQD101BdvTXY7bILA==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/oldcoupleonthebeach.jpg | 54.230.111.51 | 200 OK | 22 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/oldcoupleonthebeach.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data Hashd21ac1192332612e8d94c193c0bc31fd 28778aaa93b1f06cda1e178c83e4a5f7b98b485e 9eb023270a51e41d3f2f70e5640f21b306c4445f0ef1de4d5c075aa3931de513
GET /1em/za/cd133322letsketo/rightwing/index_files/oldcoupleonthebeach.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 21752
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:08 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f8-54f8"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l-dyi3XomLj0I9lgxcjEFgoHkINlkrAD7--tgCkCAAjNbT_kEBxpQw==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/edward.jpg | 54.230.111.51 | 200 OK | 49 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/edward.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x550, components 3\012- data Hashff8bf94cf24f1e70ac0cb441f4fa6eaf ece2e91df2259a34979364ea6b73d21b6beb1371 14a61b1554d2f0b08d16d9b8bc6a444bd8874ce7860379bda69388ce55318bd4
GET /1em/za/cd133322letsketo/rightwing/index_files/edward.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 49371
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:08 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f8-c0db"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oJfyDeaGZ4NzRBxg-eJ-cfBZU-eM3Mu17kp_nC-pKRhszSrJ0_ouNg==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/letsketo.png | 54.230.111.51 | 200 OK | 114 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/letsketo.png IP54.230.111.51:0
File typePNG image data, 440 x 832, 8-bit colormap, non-interlaced\012- data Size114 kB (114222 bytes) Hash3fb427e22e34e5281e16121ab1102b75 aae28a4916e3a2c2f33f103aa1302c2d519c9d9d 05506c0132721632ad2485e230a0a76ef9a82512adf0362710060d361852b4a5
GET /1em/za/cd133322letsketo/rightwing/index_files/letsketo.png HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 114222
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:10 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fa-1be2e"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JVrB-7PlHAjf3dpSf3ejW542-U31vgtKukoDsQpfd5Hp2FH1iEjEOw==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/olderfit.jpg | 54.230.111.51 | 200 OK | 22 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/olderfit.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data Hash5aae170428094c3d911eb0234ffa7e30 f8e2361c8eceb8d20d785472bf993e25b92c2dde 9cdf62a7161ab4eb2e4f8d2e7954fdffd3b0f4d00dfcc6ac5417f068a13f99aa
GET /1em/za/cd133322letsketo/rightwing/index_files/olderfit.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22432
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:10 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fa-57a0"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GcnnlUfZBm70EIxEhwUkcFpX9R9gmFbplwKonEKjX3KzvoZqpmKRmA==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w7.jpg | 54.230.111.51 | 200 OK | 4.4 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w7.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hash5dc3bb81ee9b5a3a25ec4438346ca796 fab4e6304f10502611ecc0d37a61c9fdb6d93849 65af64575d739ac9dd5fb9766f33da4c3f09b262d787659663d2bdea8e1d7469
GET /1em/za/cd133322letsketo/rightwing/index_files/w7.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4354
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:14 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7fe-1102"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QwBu661vBO024Z83SsttKWrFEasFC6pTw1lkJT32qZwNo-NygE7SAg==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/emilyresults4.jpg | 54.230.111.51 | 200 OK | 71 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/emilyresults4.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x600, components 3\012- data Hash098e8a2b1dd0ff2a4eb6cf0e07107dfa 196cb4c77d03db876891a848c0d497463188e078 f8b43316147685ccbb79f2008ed1554ce4d863a3a4c2d1ebb249621f7c60e7cb
GET /1em/za/cd133322letsketo/rightwing/index_files/emilyresults4.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 70658
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:04 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f4-11402"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -g9OMSXc-_Hp8k3uP1uHhayDCPTV-o_3FLn3uisLi5oSyOMMOKUaYQ==
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap | 142.250.74.74 | 200 OK | 1.6 kB |
URL HTTP/2fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap IP142.250.74.74:0
Hashc06d5c966b39d2503203443c4a1419b2 bfb2a2115111bfc99370a1126b2d7f0852cddd20 5486c6a465990df7e9a493ce03eb8b3f36248b59624a3f17672edc55e297c06b
GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 27 Jan 2023 08:11:27 GMT
date: Fri, 27 Jan 2023 08:11:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w12.jpg | 54.230.111.51 | 200 OK | 4.4 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w12.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1], progressive, precision 8, 100x100, components 3\012- data Hash6ea8c09485df7f199cba7f2a78ed2c3b f9ab1083777d46aaadb25c097982b259ba969c6e 6c15bc75b99832fa238ad7ac05c013b64f71ba08ceda7af855bb9d59f5bfd417
GET /1em/za/cd133322letsketo/rightwing/index_files/w12.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 4361
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:16 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a800-1109"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _WAgAr8I353L-bL8nfX0BQj7XdLW_qZrs4FuEfmeoOFCfW0aMUvcFg==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w6.jpg | 54.230.111.51 | 200 OK | 3.2 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/w6.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 100x100, components 3\012- data Hash799ced126448bb839d5a4baf02c183bd a2149cc4e3c688fc807faecaf59f044db656f074 813c8ce24527db30a27da02a83df312a8135b95a42c4c1b31f755c5272304a51
GET /1em/za/cd133322letsketo/rightwing/index_files/w6.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3157
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:12 GMT
etag: "63b8a7fc-c55"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qzXrF53Kri_FxvtIHiYyPZJ-UOwM3NG3UjLEx18bS2WQJ2lnGARCpQ==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/jason.jpg | 54.230.111.51 | 200 OK | 46 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/jason.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x412, components 3\012- data Hashe3545242cf1c31fd9780806501075c97 e4a0e4705a02cf1987a6776f5ab572bcc2d2757a 32b027ca66695404bb4d1d1b092b5839ebbf5dba9d3984185f564c03b3cdae1b
GET /1em/za/cd133322letsketo/rightwing/index_files/jason.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 46285
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:02 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f2-b4cd"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zwAFxGqCrXTGq-0KPy-iQQRWefq8kB8M93I8NhJmHQepiqg8RUrw_Q==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/emilyresults3.jpg | 54.230.111.51 | 200 OK | 50 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/emilyresults3.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x600, components 3\012- data Hash13800805722a6a6b60efdad103812f43 c7086730113f6c30c7b87a47010d5cf6415af894 fd4c4ff0e7ab9f36cbe05784a303ecbe444de8b8cf8c51d4649176c7cd519b6b
GET /1em/za/cd133322letsketo/rightwing/index_files/emilyresults3.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 50427
server: nginx/1.20.0
last-modified: Fri, 06 Jan 2023 23:00:04 GMT
accept-ranges: bytes
date: Fri, 27 Jan 2023 08:11:27 GMT
etag: "63b8a7f4-c4fb"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kya1etOlESR2gJYBbM1JE_EmhOSyuaKIZhvTehYSYa61PDfvnTB3hg==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/prof.jpg | 54.230.111.51 | 200 OK | 20 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/prof.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data Hash64292bbf429998324ab3670fe18ae018 fbf0ea6087df3724ae62cfb666b6c02d56d1031a afb8821365736a6be031cb063b2077addf846fd56c705549ce863433cd6023a4
GET /1em/za/cd133322letsketo/rightwing/index_files/prof.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 19866
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:08 GMT
etag: "63b8a7f8-4d9a"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BIRDm1AUO1Sm0fhCeCWEHsd8NyIflEG1g82yMEug47n3fL--4gl5YA==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/olderwomanfit.jpg | 54.230.111.51 | 200 OK | 32 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/olderwomanfit.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data Hash745dd9d16c3d9204a54214d538f14695 2a3df83bf8ce9d9e73f5537b4ce39b6861d157d8 7cca4556d550ff2f0bad8e25cf0fa60e947a7c07702c41459039a59370edbfc1
GET /1em/za/cd133322letsketo/rightwing/index_files/olderwomanfit.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 32116
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:10 GMT
etag: "63b8a7fa-7d74"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YiD5_e96mC4NbrKbysR_hx7tluZ5Bce44rz4koe3CR7i3Jv1wE-GIw==
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/11.jpg | 54.230.111.51 | 200 OK | 23 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/11.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 496x259, components 3\012- data Hash34f1513b705583e943e240ce3e79cbad 75043848d1a97e2062f109268dfd0f3b31a76c84 1d62b360e04a8756527f5faa91ffa660dc525ba40d69cec402fe823e5cfb55f6
GET /1em/za/cd133322letsketo/rightwing/index_files/11.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 22631
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:14 GMT
etag: "63b8a7fe-5867"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uU5ulBaQNYBcR5-u0bQ7rgbBmkbIj_dgeyEwLnGHh_4JuzZYv_6pig==
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 07:49:03 GMT
age: 1344
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/15.jpg | 54.230.111.51 | 200 OK | 20 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/15.jpg IP54.230.111.51:0
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 495x504, components 3\012- data Hashe701b42012eca68980758c74b6a65855 dd229db01c602bbb292fc30281d45ef3e5a56958 f1f1ba45f97646151df0bb729ed3b2c4349d0104ee1eea0f10e954546381150a
GET /1em/za/cd133322letsketo/rightwing/index_files/15.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 19978
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:18 GMT
etag: "63b8a802-4e0a"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yKiaLt8rtN3FqJH--gtwbk_61-l9ZJLZ3Xv3ZRHpDK7AO_84OVxHew==
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashd9bf2793558044193d7e5d27708a9144 5a8f73462cfda6544cc3efe488854c3cd80bb0a7 e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 08:11:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashd9bf2793558044193d7e5d27708a9144 5a8f73462cfda6544cc3efe488854c3cd80bb0a7 e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 08:11:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashd9bf2793558044193d7e5d27708a9144 5a8f73462cfda6544cc3efe488854c3cd80bb0a7 e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 08:11:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/testpatient.jpg | 54.230.111.51 | 200 OK | 68 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/testpatient.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x377, components 3\012- data Hash86da6455089c3b57dd4928ebeeb97ea4 0c543bfc85debf2b006b32ef4975b87cca67fb8a 78ce13682eae88798f9e4c989109a95344301cc292c054b7cf89f1a23a0fd555
GET /1em/za/cd133322letsketo/rightwing/index_files/testpatient.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 67930
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:06 GMT
etag: "63b8a7f6-1095a"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fdDpCu43UuDBIzeiQ_U2QM9ok_qVPgsSCFH7KiuxLzyG1JjLjhPXww==
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashd9bf2793558044193d7e5d27708a9144 5a8f73462cfda6544cc3efe488854c3cd80bb0a7 e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 08:11:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/js-1em.js | 54.230.111.51 | 200 OK | 1.3 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/js-1em.js IP54.230.111.51:0
Hash2c94d7100638acfdd625c3d097a8bc0a 09f1cb1565da945f57c27a255ddd3ee69ca873d4 9628f458cdb4c08332734be0eb85f439214466615f1c6fc4b267a936f2a9ee41
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /1em/za/cd133322letsketo/rightwing/js-1em.js HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 27 Jan 2023 00:08:42 GMT
server: nginx/1.22.0
last-modified: Thu, 03 Nov 2022 15:53:00 GMT
etag: W/"6363e3dc-910"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: C--HboSVTfYp8W6lFQ_94P_TYsbqAjzirKY4-lJlXQJElIARKlASqg==
age: 28965
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/mineralresults.jpg | 54.230.111.51 | 200 OK | 64 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/mineralresults.jpg IP54.230.111.51:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x550, components 3\012- data Hashd72eff902f605d1719fc4e3ddc3502a3 d08934ae08ecf04b0401f71ecc0f61d79f4e6148 24370d3bea059ba25cdf8cea22e5a3ddba67dfc999dcb72b7c216a70857d0f72
GET /1em/za/cd133322letsketo/rightwing/index_files/mineralresults.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 64279
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:08 GMT
etag: "63b8a7f8-fb17"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Cjp8SHCCqlxHo-4WF6W1oaUKLTlYXwT_8bYNQhVD0XAqxsXLtG3FKw==
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 | 142.250.74.35 | 200 OK | 38 kB |
URL HTTP/2fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 37924, version 1.0\012- data Hashe08be6d5d433944f7ad52902e4d24db5 e2600c1d60d12d397b3ee44411a021231d71e974 450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e
GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://infostream.info
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37924
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 22 Jan 2023 01:47:10 GMT
expires: Mon, 22 Jan 2024 01:47:10 GMT
cache-control: public, max-age=31536000
age: 455057
last-modified: Mon, 11 Jul 2022 20:54:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data Hashd7b0b953a50fddaa88089b5b787cf719 2f85bc568b27659a3d6452f58f9fd7678450326d e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://infostream.info
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 22:14:51 GMT
expires: Wed, 24 Jan 2024 22:14:51 GMT
cache-control: public, max-age=31536000
age: 208596
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://infostream.info
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 19:33:54 GMT
expires: Thu, 25 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 131853
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/robert.jpg | 54.230.111.51 | 200 OK | 102 kB |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/robert.jpg IP54.230.111.51:0
File typePNG image data, 550 x 550, 8-bit colormap, non-interlaced\012- data Size102 kB (101555 bytes) Hashe6d8ac219dc8aeb6d3358db35a2c2889 89f3e730ae495dff6ede9778bcd630bc3596d3ac 460c8e8c56d6ccd6af6d740a3c2e42478f81e04b45eae2b2177ed8decbae2098
GET /1em/za/cd133322letsketo/rightwing/index_files/robert.jpg HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 101555
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:10 GMT
etag: "63b8a7fa-18cb3"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 19Kb3OvNScC36yA5DsTwdV_1SWYp6tFt0s0AkqeOH_xaotAspQCjUQ==
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 | 142.250.74.35 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data Hash3d7f7413fca69bff4d231ebdc50aaab0 cb18e7943b6a8a0e3672d7242197c19a226b92e8 6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://infostream.info
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 15:42:33 GMT
expires: Wed, 24 Jan 2024 15:42:33 GMT
cache-control: public, max-age=31536000
age: 232134
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash16a7b6a7128312e2f985d30df18c4487 6017bff79ffb525d9c7f9f32b999b74b5dc69602 663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21337
Expires: Fri, 27 Jan 2023 14:07:04 GMT
Date: Fri, 27 Jan 2023 08:11:27 GMT
Connection: keep-alive
|
|
| fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap | 142.250.74.74 | 200 OK | 1.6 kB |
URL HTTP/2fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap IP142.250.74.74:0
Hash780f32a6ccc729257a47ceed3e9865a2 99cd3b6e561003e528e555989d5d04885241e18d fe725d038fe8a9c9050aa271164f3d7e6ad62c64ae966c88068b8dbcac8b6eee
GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 27 Jan 2023 08:11:27 GMT
date: Fri, 27 Jan 2023 08:11:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashd9bf2793558044193d7e5d27708a9144 5a8f73462cfda6544cc3efe488854c3cd80bb0a7 e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 08:11:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash986f7d4b9702a8e26d237cec0a5c59e3 8c2f50c63822270bb7719ff66d8b1f04f5544f3d 14db3870203cab88d37b748582cccfcc728453f32a7c364cfd5f9b7dfbca27fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "14DB3870203CAB88D37B748582CCCFCC728453F32A7C364CFD5F9B7DFBCA27FE"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12189
Expires: Fri, 27 Jan 2023 11:34:36 GMT
Date: Fri, 27 Jan 2023 08:11:27 GMT
Connection: keep-alive
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/scissors.png | 54.230.111.51 | 404 Not Found | 153 B |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/scissors.png IP54.230.111.51:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashac5ea41aae137cead073d37a7bb732bc 85bde4b57e1f38bd7ff0e6cf4b6ac5f626a5fbae fcdc802dabd14bed15efb9235ee0decac4adb6908dca03eeba74e2bf8f4eb5a7
GET /1em/za/cd133322letsketo/rightwing/index_files/scissors.png HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/index_files/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
content-length: 153
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
x-cache: Error from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TdlElokk1a9hzLemP4_TRTcC3zuqFdstBLn8fXAK4K2oTfzgp_VfDg==
X-Firefox-Spdy: h2
|
|
| deefauph.com/zone?&pub=0&zone_id=5101589&is_mobile=false&domain=infostream.info&var=dba01f3a-d646-448d-9535-b6cd049c37cb&ymid=w34gufhgdtmuno6m24i11e4m&var_3=&dsig=&action=prerequest |  139.45.197.251 | 200 OK | 0 B |
URL HTTP/2deefauph.com/zone?&pub=0&zone_id=5101589&is_mobile=false&domain=infostream.info&var=dba01f3a-d646-448d-9535-b6cd049c37cb&ymid=w34gufhgdtmuno6m24i11e4m&var_3=&dsig=&action=prerequest IP139.45.197.251:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /zone?&pub=0&zone_id=5101589&is_mobile=false&domain=infostream.info&var=dba01f3a-d646-448d-9535-b6cd049c37cb&ymid=w34gufhgdtmuno6m24i11e4m&var_3=&dsig=&action=prerequest HTTP/1.1
Host: deefauph.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://infostream.info
Connection: keep-alive
Referer: https://infostream.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 08:11:28 GMT
content-length: 0
x-trace-id: 1f788131e905c0ea90634ac6810abad6
access-control-allow-origin: https://infostream.info
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.149.93.186 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.149.93.186:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 354/f1NALNKplqlzLiFrcA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lET/rAhtjTamQDXPXHn8zAKN71o=
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8888
Expires: Fri, 27 Jan 2023 10:39:37 GMT
Date: Fri, 27 Jan 2023 08:11:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8888
Expires: Fri, 27 Jan 2023 10:39:37 GMT
Date: Fri, 27 Jan 2023 08:11:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8888
Expires: Fri, 27 Jan 2023 10:39:37 GMT
Date: Fri, 27 Jan 2023 08:11:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash2e21811f62c077f45a93d7c3b543998d 3e890a73bb51d9dd1021d5339271aa40833ba258 c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8888
Expires: Fri, 27 Jan 2023 10:39:37 GMT
Date: Fri, 27 Jan 2023 08:11:29 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash869cdfba2637cc932ce387317a3c485e 51d87a5223d87c959bf27b2a825dce0a28f52ada 6dc4247dd3110836195f9962463bd8265be89633e9e589bf19955991751c26fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5669
x-amzn-requestid: 17f6235c-d495-4813-9453-407331e0dcad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1ZSH4fIAMFxeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c3b-67ff5c7f416727670e7c3b21;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KGNpzuI2ny_1LH90atWa09SPYG7Ovolbv_KvL8nC6fUk59z-6TFsMQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 03:05:08 GMT
age: 18381
etag: "51d87a5223d87c959bf27b2a825dce0a28f52ada"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb7a0759c043594fbe85af422b59b8227 a05cfaad16078f42218dae233da38f6f5dff8487 e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 2e85f75e-ab9d-4d45-adad-7313950a9647
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSWbxGwnoAMFejw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d117-68f1a9e71a07a0453311fd32;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 06:49:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dbz3wXGNaetf6xvRE98rshyHy-FVfDo8co-4VDL0a4Qe3E4U8A82Og==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 18:35:59 GMT
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
age: 48930
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashbad60daf652c598a06510ff955137b69 235bf4642e726bb6a303fe1b69238e2e973414cb d655c5ac17274a30a89c31674e14dc9c1b6bc39bfff94db1c9ff0d8006bb673b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12508
x-amzn-requestid: 68787c38-72fe-4d8a-9521-aeb9efa56b05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fBYWyGIHoAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca075e-1ee9488d2dd0437728beac94;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 03:15:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0lNizMpeWOcOlokaaW-WB7LXRReZwaFfPE38C-SmsS_PbxJPhcRYfw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 15:21:30 GMT
age: 60599
etag: "235bf4642e726bb6a303fe1b69238e2e973414cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5e7158416f60576804ccff03307319fe a342f94625e913fa6b8d862a59979f1e3ad80dd1 5c525df7d169cc7e033d920c11f4a0163a781c025a22b70530882b56964a9a52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5737
x-amzn-requestid: 23239d1f-0228-4722-b826-40dc8c9a4af2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVzDbEacIAMFZtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d23215-1604c24e272fbb657b9925cc;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:56:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -_8PZoms7W6Lvw__KsoTwL_CzjfyWChzoSWDc9yCk9zCR8cTs87oNA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 16:31:35 GMT
age: 56394
etag: "a342f94625e913fa6b8d862a59979f1e3ad80dd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61f2aec8-2d63-4f9f-9980-04c179cc5720.jpeg | 34.120.237.76 | 200 OK | 4.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61f2aec8-2d63-4f9f-9980-04c179cc5720.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash464592dade1d7207d58b22d5d09d9254 3caa2537edfe4c738540884b3eda51e437d26f4d c0cdec94ff460c4b875657bb53ed90ef2ef786a2b8095d1ebf09365556536375
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61f2aec8-2d63-4f9f-9980-04c179cc5720.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4627
x-amzn-requestid: 38f2ed09-3a2e-4b5d-bde9-24fd7467d1a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1ZJE-BIAMFvdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c3a-4ad90b1c2883444f547b6f84;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Pl5Ta4lZHz2a_R1U3OnL1AZFcLc4Ez6_2U7WZ6ZYUC26k9r7m6mxXw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 03:05:12 GMT
age: 18377
etag: "3caa2537edfe4c738540884b3eda51e437d26f4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg | 34.120.237.76 | 200 OK | 9.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashdc869235086902c4acc379733b6bfdb8 0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae e614e29b14e69209fd4b82a688290f7a3f541909833a6558cf480aca899bab6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9056
x-amzn-requestid: 81cf473d-8dc6-49e7-b012-d0b7dfaec7f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fB4COHTlIAMFtRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca3a0e-0848461c054db5c66fde9107;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 06:51:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MApUIVJ9KiOB34nLWUtMNmA8deQVoQ9xyNqSUYXlzdLlGoP9n78C5A==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 06:24:42 GMT
age: 6407
etag: "0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/jquery-3.6.3.min.js | 54.230.111.51 | 200 OK | 0 B |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/jquery-3.6.3.min.js IP54.230.111.51:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /1em/za/cd133322letsketo/rightwing/index_files/jquery-3.6.3.min.js HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 27 Jan 2023 06:53:15 GMT
server: nginx/1.22.0
last-modified: Sun, 08 Jan 2023 18:19:14 GMT
etag: W/"63bb0922-15f5b"
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kTWF6xnoZr_ZiHjNbRiBQCCcCrv8yEMm2yzgRcUNgWoOPHUgCLp1iQ==
age: 4692
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/style.css | 54.230.111.51 | 200 OK | 0 B |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/style.css IP54.230.111.51:0
GET /1em/za/cd133322letsketo/rightwing/index_files/style.css HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Fri, 27 Jan 2023 07:59:53 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:00 GMT
etag: W/"63b8a7f0-54d9"
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Yguvp5PTA4tNk7Nv3ClSXdaA00CP0blrhqFs5ZCc2c7wtu58wxfBBg==
age: 694
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&display=swap | 142.250.74.74 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&display=swap IP142.250.74.74:0
GET /css2?family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 27 Jan 2023 08:11:27 GMT
date: Fri, 27 Jan 2023 08:11:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7 | 54.230.111.51 | 200 OK | 0 B |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7 IP54.230.111.51:0
GET /1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7 HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
date: Fri, 27 Jan 2023 04:09:54 GMT
server: nginx/1.22.0
last-modified: Sun, 22 Jan 2023 01:43:56 GMT
etag: W/"63cc94dc-122ea"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TzUT39fRD_tLvPIaOCo2Pjaq8jjAJt4mT1JeJ_t1Nj5jjYbHQkJLiA==
age: 14493
X-Firefox-Spdy: h2
|
|
| infostream.info/1em/za/cd133322letsketo/rightwing/index_files/call-ads.css | 54.230.111.51 | 200 OK | 0 B |
URL HTTP/2infostream.info/1em/za/cd133322letsketo/rightwing/index_files/call-ads.css IP54.230.111.51:0
GET /1em/za/cd133322letsketo/rightwing/index_files/call-ads.css HTTP/1.1
Host: infostream.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infostream.info/1em/za/cd133322letsketo/rightwing/?campaign_name=ZA%20PPC%20R%20BL-dm%20letsketo%201em%20pu1&lander_name=CD%20za/cd133322letsketo/rightwing/&clickid=w34gufhgdtmuno6m24i11e4m&source=dba01f3a-d646-448d-9535-b6cd049c37cb&cep=3i9W4Pd3L1VkzpPaN8ZNr9hthYsIuCgc1ws9W9Wme_lVsNKC1luZclE8tqECYmWFXfH-uVk2WhnuXrjtnxcOD-FOssbAryJodh3qgXmEOeLgkIusEspO7NdyPlJ8MFYb34NQiTN_0UMgmQl0MpG8cn3qs3aAUQaVgxGLoSGrqQmQ8C-TUMaYsFteDB8zfEnGGq6-QXs-wsriNRxEjHfBWXCXCCxqDKxN-3u_6_ZgjzTQ-tVZ4opgQRaMwcnPdyeCRSRPpkKDrb_cJgDbkcoYBryGFN_iOzWKjziOZdH5Gls_PLMRm2dB-nc14x3jv46yV-lSR5R4nitZkC2uAM1MAhRkto5Cmh_35wnwMa1U5LkeT_-VhY7EUQWoa1FQSUoE8wanA0lqDwmA9PTtwM2gnw&lptoken=16ce746d8090883968e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
date: Fri, 27 Jan 2023 08:11:27 GMT
server: nginx/1.22.0
last-modified: Fri, 06 Jan 2023 23:00:00 GMT
etag: W/"63b8a7f0-550"
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zuFv2BqXdKPGeiGwwfqkoXAwqBFwSNRJ_u90zvIj2bslSd74bMeEfg==
X-Firefox-Spdy: h2
|
|
0.0.0.0