Overview

URL telewww.site/uz/env/nl?key=eyJ0aW1lc3RhbXAiOiIxNjY5MjYyMzEwIiwiaGFzaCI6IjM3M2Y5YzBlNWZjNTg4NzgzNGY2YjMyNmQxMTMxYjJkNDIyMGU5NDkifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=74346df3-79de-4938-a627-32308fdc308a..l=72ea1b13-2480-4adc-b9fe-a2ae4c297222..a=0..b=0..r=www.mediacdnc.com
IP79.98.28.128
ASNUAB Interneto vizija
Location Lithuania
Report completed2022-11-24 03:58:53 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-11-24 2 deehalig.net Sinkholed


Files

No files detected



Passive DNS (9)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-23 05:36:46 UTC 34.117.237.239
mnemonic passive DNS deehalig.net (1) 105256 2021-09-14 17:35:14 UTC 2022-11-23 13:00:20 UTC 139.45.197.251
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
mnemonic passive DNS telewww.site (8) 0 2022-11-22 16:35:33 UTC 2022-11-23 05:38:22 UTC 79.98.28.128 Unknown ranking
mnemonic passive DNS r3.o.lencr.org (7) 344 No data No data 23.36.77.32
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-23 05:36:31 UTC 34.102.187.140
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
mnemonic passive DNS push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.88.25.203


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 79.98.28.128

Date UQ / IDS / BL URL IP
2022-12-01 12:25:59 +0000
0 - 0 - 3 telewww.site/uz/fortune/nl/ 79.98.28.128
2022-12-01 12:24:12 +0000
0 - 0 - 2 telewww.site/uz/env/nl?key=eyJ0aW1lc3RhbXAiOi (...) 79.98.28.128
2022-12-01 12:23:40 +0000
0 - 0 - 2 telewww.site/uz/env/nl/?key=eyJ0aW1lc3RhbXAiO (...) 79.98.28.128
2022-12-01 08:13:04 +0000
0 - 0 - 1 telewww.site/ 79.98.28.128
2022-12-01 01:58:44 +0000
0 - 0 - 3 telewww.site/uz/lot2/nl/7/?key=eyJ0aW1lc3RhbX (...) 79.98.28.128

Last 5 reports on ASN: UAB Interneto vizija

Date UQ / IDS / BL URL IP
2022-12-01 23:06:17 +0000
0 - 0 - 2 telenet.website/m/co/s1/ 212.237.233.86
2022-12-01 21:58:31 +0000
0 - 0 - 3 telefonica.site/co/env/nl/ 79.98.24.35
2022-12-01 21:04:46 +0000
0 - 0 - 2 telenet.website/m/br/s4/ 212.237.233.86
2022-12-01 19:58:15 +0000
0 - 0 - 3 televivo.online/kz/bx/nl/ 194.135.87.58
2022-12-01 19:57:53 +0000
0 - 0 - 3 telefonica.site/bg/bx/maxipaxi/ 79.98.24.35

Last 5 reports on domain: telewww.site

Date UQ / IDS / BL URL IP
2022-12-01 12:25:59 +0000
0 - 0 - 3 telewww.site/uz/fortune/nl/ 79.98.28.128
2022-12-01 12:24:12 +0000
0 - 0 - 2 telewww.site/uz/env/nl?key=eyJ0aW1lc3RhbXAiOi (...) 79.98.28.128
2022-12-01 12:23:40 +0000
0 - 0 - 2 telewww.site/uz/env/nl/?key=eyJ0aW1lc3RhbXAiO (...) 79.98.28.128
2022-12-01 08:13:04 +0000
0 - 0 - 1 telewww.site/ 79.98.28.128
2022-12-01 01:58:44 +0000
0 - 0 - 3 telewww.site/uz/lot2/nl/7/?key=eyJ0aW1lc3RhbX (...) 79.98.28.128

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-11-26 21:33:29 +0000
0 - 0 - 3 www.mediacdnc.com/go/d595ff21-f7e9-4424-97ab- (...) 3.70.16.242
2022-11-25 06:09:18 +0000
0 - 0 - 1 telewww.site/uz/env/nl/?key=eyJ0aW1lc3RhbXAiO (...) 79.98.28.128
2022-11-24 03:58:51 +0000
0 - 0 - 1 telewww.site/uz/env/nl/?key=eyJ0aW1lc3RhbXAiO (...) 79.98.28.128
2022-11-24 01:59:24 +0000
0 - 0 - 1 telewww.site/uz/env/nl?key=eyJ0aW1lc3RhbXAiOi (...) 79.98.28.128
2022-11-22 07:00:29 +0000
0 - 0 - 1 www.mediacdnc.com/go/d595ff21-f7e9-4424-97ab- (...) 3.70.16.242


JavaScript

Executed Scripts (11)


Executed Evals (1)

#1 JavaScript::Eval (size: 81, repeated: 1) - SHA256: 5e1d81ceaec2662e1a52d323d679ba23f7806660274084eba069a3c3882d81df

                                        (() => {
    const a = async
    function name() {};
    window['0hhg3ciz2o8t'] = true;
})()
                                    

Executed Writes (0)



HTTP Transactions (29)


Request Response
                                        
                                            GET /uz/env/nl?key=eyJ0aW1lc3RhbXAiOiIxNjY5MjYyMzEwIiwiaGFzaCI6IjM3M2Y5YzBlNWZjNTg4NzgzNGY2YjMyNmQxMTMxYjJkNDIyMGU5NDkifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=74346df3-79de-4938-a627-32308fdc308a..l=72ea1b13-2480-4adc-b9fe-a2ae4c297222..a=0..b=0..r=www.mediacdnc.com HTTP/1.1 
Host: telewww.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         79.98.28.128
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 24 Nov 2022 03:58:42 GMT
Server: Apache
Location: http://telewww.site/uz/env/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY5MjYyMzEwIiwiaGFzaCI6IjM3M2Y5YzBlNWZjNTg4NzgzNGY2YjMyNmQxMTMxYjJkNDIyMGU5NDkifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=74346df3-79de-4938-a627-32308fdc308a..l=72ea1b13-2480-4adc-b9fe-a2ae4c297222..a=0..b=0..r=www.mediacdnc.com
Content-Length: 554
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (396)
Size:   554
Md5:    b82efaea19d5c4c8ab7cd6295d3faa75
Sha1:   4095cc473a6cac041b4e1a1cb9f5d95719b601ce
Sha256: 19e2340ea028bb3e3947c5afd06f662661db2195fb49e3be2274b6a71f31630d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11034
Expires: Thu, 24 Nov 2022 07:02:36 GMT
Date: Thu, 24 Nov 2022 03:58:42 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5178
Cache-Control: max-age=115132
Date: Thu, 24 Nov 2022 03:58:42 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 11:57:34 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5002
Expires: Thu, 24 Nov 2022 05:22:04 GMT
Date: Thu, 24 Nov 2022 03:58:42 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 03:18:54 GMT
cache-control: public,max-age=3600
age: 2388
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    d130218d0e2841f39c99610fe1a2ab90
Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945
Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: qUzXQ/WQ6oafKdUNCMk0H0f6L0d7ZDfw2LrJQkDiTjEMvH9mgBdyjQsW5YL6KUBGnDwzU+FcZqs=
x-amz-request-id: FKF0B8EYBGG45QJ0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 03:40:15 GMT
age: 1107
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /uz/env/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY5MjYyMzEwIiwiaGFzaCI6IjM3M2Y5YzBlNWZjNTg4NzgzNGY2YjMyNmQxMTMxYjJkNDIyMGU5NDkifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=74346df3-79de-4938-a627-32308fdc308a..l=72ea1b13-2480-4adc-b9fe-a2ae4c297222..a=0..b=0..r=www.mediacdnc.com HTTP/1.1 
Host: telewww.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         79.98.28.128
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 24 Nov 2022 03:58:42 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (462)
Size:   3815
Md5:    8571c830630acdf4098f4e493c79f92d
Sha1:   ceab9bae59f97ce8ef8cbc97f1ba1d7a95be80ac
Sha256: a50db1c7d2c2eed9c5008ba03ca4838c9db9098f41dd6e5cd1ad77631695bd3f
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 24 Nov 2022 03:58:42 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /uz/env/nl/jquery-3.4.1.min.js HTTP/1.1 
Host: telewww.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://telewww.site/uz/env/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY5MjYyMzEwIiwiaGFzaCI6IjM3M2Y5YzBlNWZjNTg4NzgzNGY2YjMyNmQxMTMxYjJkNDIyMGU5NDkifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=74346df3-79de-4938-a627-32308fdc308a..l=72ea1b13-2480-4adc-b9fe-a2ae4c297222..a=0..b=0..r=www.mediacdnc.com

                                         
                                         79.98.28.128
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 24 Nov 2022 03:58:42 GMT
Server: Apache
Last-Modified: Tue, 22 Nov 2022 16:55:44 GMT
ETag: "15851-5ee120af375fa-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30677
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30677
Md5:    c65598a79e692c79f732ea0b099f9da7
Sha1:   5459de784144478c4a5088437bf5da4690dbae5f
Sha256: 653cc57da3a15e7ba824119d448c287f3c1a9a0afb400970ed3658d48765984a
                                        
                                            GET /uz/env/nl/main.css HTTP/1.1 
Host: telewww.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://telewww.site/uz/env/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY5MjYyMzEwIiwiaGFzaCI6IjM3M2Y5YzBlNWZjNTg4NzgzNGY2YjMyNmQxMTMxYjJkNDIyMGU5NDkifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=74346df3-79de-4938-a627-32308fdc308a..l=72ea1b13-2480-4adc-b9fe-a2ae4c297222..a=0..b=0..r=www.mediacdnc.com

                                         
                                         79.98.28.128
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 24 Nov 2022 03:58:42 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 22 Nov 2022 16:55:44 GMT
ETag: "f570-5ee120af3c802-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Thu, 01 Dec 2022 03:58:42 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6287
Keep-Alive: timeout=2, max=100


--- Additional Info ---
Magic:  ASCII text, with very long lines (62832), with no line terminators
Size:   6287
Md5:    79da2222b03fb177a87fbd357d8485e6
Sha1:   c0dfd6b4e56e78c8e77911781cc92bf47b2cc7e2
Sha256: 896467d9c1aa03855150139e97e9b357478d6dd2a1f3eb8c5b40b614daf25ed9
                                        
                                            GET /uz/env/nl/main/env_closed.png HTTP/1.1 
Host: telewww.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://telewww.site/uz/env/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY5MjYyMzEwIiwiaGFzaCI6IjM3M2Y5YzBlNWZjNTg4NzgzNGY2YjMyNmQxMTMxYjJkNDIyMGU5NDkifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=74346df3-79de-4938-a627-32308fdc308a..l=72ea1b13-2480-4adc-b9fe-a2ae4c297222..a=0..b=0..r=www.mediacdnc.com

                                         
                                         79.98.28.128
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 24 Nov 2022 03:58:43 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 22 Nov 2022 16:55:47 GMT
ETag: "9e9-5ee120b2bd3b9"
Accept-Ranges: bytes
Content-Length: 2537
Cache-Control: max-age=604800
Expires: Thu, 01 Dec 2022 03:58:43 GMT
Keep-Alive: timeout=2, max=100


--- Additional Info ---
Magic:  PNG image data, 257 x 184, 8-bit colormap, non-interlaced\012- data
Size:   2537
Md5:    9adbaf1f271f2921d941cfc431705ff0
Sha1:   e82f0ee057bac2525d8558c431995b4f59f3a897
Sha256: ec8362f7adbe35e42507491256929b59a8af11a8b369bc800f778b834e411abf
                                        
                                            GET /uz/env/nl/main/env_prize.png HTTP/1.1 
Host: telewww.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://telewww.site/uz/env/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY5MjYyMzEwIiwiaGFzaCI6IjM3M2Y5YzBlNWZjNTg4NzgzNGY2YjMyNmQxMTMxYjJkNDIyMGU5NDkifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=74346df3-79de-4938-a627-32308fdc308a..l=72ea1b13-2480-4adc-b9fe-a2ae4c297222..a=0..b=0..r=www.mediacdnc.com

                                         
                                         79.98.28.128
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Thu, 24 Nov 2022 03:58:43 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 22 Nov 2022 16:55:47 GMT
ETag: "5ca2-5ee120b2c5c72"
Accept-Ranges: bytes
Content-Length: 23714
Cache-Control: max-age=604800
Expires: Thu, 01 Dec 2022 03:58:43 GMT
Keep-Alive: timeout=2, max=100


--- Additional Info ---
Magic:  PNG image data, 257 x 184, 8-bit/color RGBA, non-interlaced\012- data
Size:   23714
Md5:    b7bc776e77537fa4344320aa4a70273b
Sha1:   1147c2924bfec5c53ccb1696fe48e2dd9de5c005
Sha256: e105626ad1b418afb13aceace378797968708e10697dc1736c8814ad4dc4df65
                                        
                                            GET /uz/env/nl/main/profiles.jpg HTTP/1.1 
Host: telewww.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://telewww.site/uz/env/nl/main.css

                                         
                                         79.98.28.128
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 24 Nov 2022 03:58:43 GMT
Server: Apache
Last-Modified: Tue, 22 Nov 2022 16:55:47 GMT
ETag: "2cc8-5ee120b2c6ffa"
Accept-Ranges: bytes
Content-Length: 11464
Cache-Control: max-age=604800
Expires: Thu, 01 Dec 2022 03:58:43 GMT
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 192x192, components 3\012- data
Size:   11464
Md5:    9843213a5da9d2a124e06b027395942e
Sha1:   75c45679d7a02f86525b7b6307c9b21f563bbe39
Sha256: 59e24e799de12328d718a9e625911ce3dc12f8169c9474ad1a1b7cb144aa4303
                                        
                                            GET /uz/env/nl/favicon.ico HTTP/1.1 
Host: telewww.site
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://telewww.site/uz/env/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY5MjYyMzEwIiwiaGFzaCI6IjM3M2Y5YzBlNWZjNTg4NzgzNGY2YjMyNmQxMTMxYjJkNDIyMGU5NDkifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=74346df3-79de-4938-a627-32308fdc308a..l=72ea1b13-2480-4adc-b9fe-a2ae4c297222..a=0..b=0..r=www.mediacdnc.com

                                         
                                         79.98.28.128
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 24 Nov 2022 03:58:43 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   196
Md5:    62962daa1b19bbcc2db10b7bfd531ea6
Sha1:   d64bae91091eda6a7532ebec06aa70893b79e1f8
Sha256: 80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 03:11:11 GMT
cache-control: public,max-age=3600
age: 2852
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4442
Cache-Control: max-age=109332
Date: Thu, 24 Nov 2022 03:58:43 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 10:20:55 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: kk3S8hxeNyUoWAeA93UgjQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.88.25.203
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BAQi+pNvlfaDp2Fha+KDP9iQeBQ=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8997
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 03:58:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8997
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 03:58:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8997
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 03:58:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8997
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 03:58:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8997
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 03:58:45 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZtjzvMh_vqVaOqm8xPfZ2EWGGl0X7Iv8GK40Z32EbKM4wk6tGPnlYA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:27:21 GMT
age: 19884
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7589
Md5:    06c6e720bc9900b38e88cd72f739603e
Sha1:   22884cbc78622d6f78c1c3397c9b440946144a99
Sha256: 8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YJuHCuUgkLuFFiQUlrPWgv9grHznufMTU08hi4ZMpQTBmou6BGWrhQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:47:52 GMT
age: 22253
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7993
Md5:    92c78302bcce1568eb6a5563100b932c
Sha1:   43d1dec7fc06879988c9c3cadd800cc8145df988
Sha256: 0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16a0ed43-823b-41a5-9073-733ac15040d1.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10667
x-amzn-requestid: 985ed1c6-49ed-4851-8a79-f700bbe027c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsGkSIAMFvDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-260dc99256e117e85643b441;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _fs5EfJzWkPQB-Ur7_YVmCHySMj_WXiHUCK8w2nWYvrJSkDaquq37g==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:50:57 GMT
etag: "10a988580bb7a1be72be5dd50d2aef9789f36b62"
age: 22068
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10667
Md5:    f0dfc05d73111c498bb0e844105a02f6
Sha1:   10a988580bb7a1be72be5dd50d2aef9789f36b62
Sha256: 3852f331fe12a0a8e6007409f043da6aabadbb8f2883e87ae72ca8d70d31727f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11401
x-amzn-requestid: 3bc374eb-7d70-4b95-94a7-2ad06cae4726
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtHcmoAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-333793987245ff9e741b9aed;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K4A6bdVv0gauO3YWTEPWMS6fhuB9CZ6o5dUL-O6G5-NzqOGQRzQLUw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:04 GMT
age: 22181
etag: "4b131a189db1b615e2519a28cad83d78297ab67f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11401
Md5:    eb94ecb5881a7e49d964e4287d11e7a4
Sha1:   4b131a189db1b615e2519a28cad83d78297ab67f
Sha256: f3693e29eb7b72361093434142e3f18969c1a0b02350fab430fa29c7c127bd1a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff189dcee-7158-4549-abef-95dc2b7f7ca4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9992
x-amzn-requestid: a16f614c-5a5b-4f8b-97cb-c248e0b50753
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvcYEa0IAMFm_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e92b5-3b65b1b17c2a20b44a31aa9f;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:37:57 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OC0uEwrEKZ6UEEg_mpvYcoVBEUSEA_qTttmyRp1xptCRD4Vi4pFbCg==
via: 1.1 946b9edb2009c5508a0fbbd636f95014.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:13:55 GMT
etag: "51a54b639617e113bb941d28b59c2571c0ca2e63"
age: 20690
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9992
Md5:    037c0f19435a955d7ed58f65911e8f21
Sha1:   51a54b639617e113bb941d28b59c2571c0ca2e63
Sha256: c2b15ed9257f220ed83845e1d0b343d21b7df9104c21162ea76b889609b8a404
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5070
x-amzn-requestid: d86d95ad-9b78-4047-82e7-04e83a97e330
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwViF1GIAMF_PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9423-10809ba1634776171cf79cb8;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:03 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: rrs7G6Wto6iY0rT6KsKwKAOPJjehXqD0jHZrR_eaiqpepQILFr7Dtw==
via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:07 GMT
age: 22178
etag: "89accd230fba95fe0049678070817b36ead015fa"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5070
Md5:    0856fdb55f19f03a1bec38b3d6e0ac77
Sha1:   89accd230fba95fe0049678070817b36ead015fa
Sha256: 17c6e6f9bb8f4261fff2dc2a43ed994986418761624b8afead768e89927594f2
                                        
                                            GET /pfe/current/micro.tag.min.js?z=5225827&sw=/sw-check-permissions-f820d.js HTTP/1.1 
Host: deehalig.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://telewww.site/

                                         
                                         139.45.197.251
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 24 Nov 2022 03:58:47 GMT
Last-Modified: Wed, 23 Nov 2022 09:28:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"637de7d7-12fca"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   27212
Md5:    844ad214f5aa47eb128a7ddb2ea428d5
Sha1:   6a52dc041201a83d6d459d42fc51c35e81caacfd
Sha256: ae9eb0e0751be615dfcbe9ad0395bc1c05a8a6438cb31cfb99bf50d5f3252cf2

Alerts:
  Blocklists:
    - quad9: Sinkholed