Overview

URL loneoakmarketing.com/mtm/direct/.eJx1kMFygjAURf-FpVUD44yinS6oaKsgoBi13ThpiJiSEAwpEjr999J212l39917Nue9G2-SGhMDnJUqJoCJnAiUcSQzomie9rHggCsOEioJVqBPllruqFCaxRoqr_KjfWnmUNlTU8qh9AJnsFy5pEoWcoCfehd31QumjxFMENMWO8UQijKm9sMlRZoyfwuFiqme4teooVlF7Tqo4cLFeaRtK2pmo2A0E-EIZis9TvwmO86H6ybccks4ayGH-6rYrX3nPlJLfp1YYr6JvYmEqbvYzA87x4vK1Hw-vFyDwTasTqEAptE1kEzL1rhNkpyIJLI9fuz_1G-5syjVMUectOQ_CMKYFKrdFalV-0zOuqgoGMVIUZGD-qu5qX-3nN1e7sz-uNsBne9kGx-fx5uLcw:1oJvQE:WHpwN-JM-vmL1q4Ivvaipqj707M/2
IP45.33.2.79
ASNLinode, LLC
Location United States
Report completed2022-08-05 15:12:29 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-08-05 2 loneoakmarketing.com/mtm/direct/.eJx1kMFygjAURf-FpVUD44yinS6oaKsgoBi13ThpiJ (...) Malware
2022-08-05 2 www1.loneoakmarketing.com/ls.php Malware
mnemonic secure dns  No alerts detected
Quad9 DNS
Added / Verified Severity Host Comment
2022-08-05 2 loneoakmarketing.com Sinkholed
2022-08-05 2 loneoakmarketing.com Sinkholed
2022-08-05 2 loneoakmarketing.com Sinkholed
2022-08-05 2 loneoakmarketing.com Sinkholed
2022-08-05 2 loneoakmarketing.com Sinkholed
2022-08-05 2 loneoakmarketing.com Sinkholed


Files

No files detected



Passive DNS (14)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] loneoakmarketing.com (1) 0 2018-12-10 10:25:07 UTC 2018-12-10 10:25:07 UTC 198.58.118.167 Unknown ranking
[Mnemonic Passive DNS] www1.loneoakmarketing.com (5) 0 2022-06-02 20:48:33 UTC 2022-08-05 11:12:34 UTC 75.2.73.197 Unknown ranking
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.7
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-08-05 05:06:42 UTC 54.230.111.7
[Mnemonic Passive DNS] d1lxhc4jvstzrp.cloudfront.net (4) 0 No data No data 54.230.245.39 Unknown ranking
[Mnemonic Passive DNS] www.google.com (3) 7 2012-05-22 04:23:54 UTC 2022-08-05 08:30:52 UTC 142.250.74.164
[Mnemonic Passive DNS] afs.googleusercontent.com (1) 12123 2017-01-30 05:39:23 UTC 2022-08-05 06:46:27 UTC 142.250.74.1
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-08-05 06:49:03 UTC 34.120.237.76
[Mnemonic Passive DNS] r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-08-05 04:57:18 UTC 23.36.76.226
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] ocsp.digicert.com (1) 86 2012-11-29 12:49:49 UTC 2022-08-05 07:19:54 UTC 93.184.220.29
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-08-05 05:06:17 UTC 54.148.62.24
[Mnemonic Passive DNS] ocsp.pki.goog (7) 175 2017-06-14 07:23:31 UTC 2022-08-05 04:56:14 UTC 142.250.74.3
[Mnemonic Passive DNS] partner.googleadservices.com (1) 798 2017-01-30 04:56:54 UTC 2022-08-05 05:01:52 UTC 142.250.74.98


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 45.33.2.79

Date UQ / IDS / BL URL IP
2022-08-14 03:53:18 +0000
0 - 0 - 3 alrxa.com/ 45.33.2.79
2022-08-14 03:52:18 +0000
0 - 0 - 2 boogerbarter.com/mtm/direct/.eJxtikEOwjAMBP_i (...) 45.33.2.79
2022-08-14 02:34:34 +0000
0 - 0 - 1 sizzlincelebs.vsni.com/mtm/direct/.eJx1yssKAj (...) 45.33.2.79
2022-08-14 00:34:59 +0000
0 - 0 - 3 bloquer.com/ 45.33.2.79
2022-08-13 22:13:05 +0000
0 - 0 - 4 nicerfoods.com/ 45.33.2.79
2022-08-13 20:13:17 +0000
0 - 0 - 2 jumbotgp.com/mtm/direct/.eJxdikEOwjAMBP_iY4lq (...) 45.33.2.79
2022-08-13 18:04:48 +0000
0 - 0 - 2 xxxarea.com/mtm/direct/.eJxdikEOwjAMBP_iYxvVP (...) 45.33.2.79
2022-08-13 15:50:41 +0000
0 - 0 - 2 sohodecor.com/mtm/direct/.eJxdikEOwjAMBP_iY4l (...) 45.33.2.79
2022-08-13 15:44:45 +0000
0 - 0 - 2 pinkjade.com/ 45.33.2.79
2022-08-13 15:41:54 +0000
0 - 0 - 3 nakedvideos.com/mtm/direct/.ejxlijsoajembe_ic (...) 45.33.2.79

Last 10 reports on ASN: Linode, LLC

Date UQ / IDS / BL URL IP
2022-08-14 06:26:59 +0000
0 - 0 - 2 cheatshacksfreedownload.com/mtm/direct/.ejx9i (...) 198.58.118.167
2022-08-14 06:26:46 +0000
0 - 0 - 2 advanced-esthetic.us/http:/advanced-esthetic. (...) 198.58.118.167
2022-08-14 06:24:33 +0000
0 - 0 - 3 blackarse.com/mtm/direct/.ejxdikeowjambp_iy4l (...) 45.79.19.196
2022-08-14 06:23:47 +0000
0 - 0 - 2 tarotcanada.com/mtm/direct/.eJxliksKAkEMBe-S5 (...) 45.33.18.44
2022-08-14 06:22:02 +0000
0 - 0 - 2 tits.net/mtm/direct/.eJxdycEKwjAQhOF32WMNXY9a (...) 173.255.194.134
2022-08-14 06:19:07 +0000
0 - 0 - 3 indianmoviemall.com/ 45.33.30.197
2022-08-14 06:00:03 +0000
0 - 0 - 1 accessalohatravel.com/mtm/direct/.eJx1ikEKAjE (...) 72.14.185.43
2022-08-14 05:45:16 +0000
0 - 0 - 2 mothernature.one/wp-content/plugins/woocommer (...) 45.33.20.235
2022-08-14 05:16:47 +0000
0 - 0 - 1 athleticclearance.org/mtm/direct/.eJx1yssKwkA (...) 96.126.123.244
2022-08-14 04:57:56 +0000
0 - 0 - 2 totalfarm.com/ 45.33.23.183

Last 8 reports on domain: loneoakmarketing.com

Date UQ / IDS / BL URL IP
2022-08-06 00:29:16 +0000
0 - 0 - 8 loneoakmarketing.com/mtm/direct/.eJx1kMtugzAQ (...) 45.33.23.183
2022-07-19 17:21:13 +0000
0 - 0 - 8 loneoakmarketing.com/mtm/direct/.eJx1kEtSwzAQ (...) 45.33.2.79
2022-07-14 04:07:02 +0000
0 - 0 - 14 loneoakmarketing.com/http:/loneoakmarketing.c (...) 45.33.20.235
2022-07-11 10:11:29 +0000
0 - 0 - 8 loneoakmarketing.com/mtm/direct/.eJx1kE1zgjAU (...) 45.56.79.23
2022-07-10 18:52:03 +0000
0 - 0 - 7 loneoakmarketing.com/mtm/direct/.eJx1kF1TgkAU (...) 45.33.23.183
2022-07-08 02:45:37 +0000
0 - 0 - 8 loneoakmarketing.com/mtm/direct/.eJx1kEtygzAQ (...) 45.33.20.235
2022-07-04 12:55:25 +0000
0 - 0 - 11 loneoakmarketing.com/http:/loneoakmarketing.c (...) 45.33.30.197
2022-06-30 13:04:57 +0000
0 - 0 - 14 loneoakmarketing.com/http:/loneoakmarketing.c (...) 45.56.79.23


JavaScript

Executed Scripts (19)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (38)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F055127A4794D0F76CB4DF8F290DF8E259258A63398A700F592C859DFFE9AC34"
Last-Modified: Thu, 04 Aug 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20998
Expires: Fri, 05 Aug 2022 21:02:17 GMT
Date: Fri, 05 Aug 2022 15:12:19 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 05 Aug 2022 14:24:52 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nQk37Eg4eqTsWx3CFdpz-isSAHLdh9V65iEPSWILK-OjwRa1RzoX5A==
Age: 2847


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-09-19-18-34-07.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Sun, 31 Jul 2022 18:34:08 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 05 Aug 2022 04:15:27 GMT
etag: "578b9ff83ff3950ab2a3d1a8344d2938"
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PPg8rlWtXCmmtGOvLzAUstTQU8XCkJdezML1OyP0sFkx9zFyQBGE_Q==
age: 39413
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    578b9ff83ff3950ab2a3d1a8344d2938
Sha1:   39d48b67ba6aa45ec01767725e726cf9b0c87a70
Sha256: 35c99da9a5463a4788ceab7cf4b027bb25506cde28ace36c70d0bc924138f2f5
                                        
                                            GET /mtm/direct/.eJx1kMFygjAURf-FpVUD44yinS6oaKsgoBi13ThpiJiSEAwpEjr999J212l39917Nue9G2-SGhMDnJUqJoCJnAiUcSQzomie9rHggCsOEioJVqBPllruqFCaxRoqr_KjfWnmUNlTU8qh9AJnsFy5pEoWcoCfehd31QumjxFMENMWO8UQijKm9sMlRZoyfwuFiqme4teooVlF7Tqo4cLFeaRtK2pmo2A0E-EIZis9TvwmO86H6ybccks4ayGH-6rYrX3nPlJLfp1YYr6JvYmEqbvYzA87x4vK1Hw-vFyDwTasTqEAptE1kEzL1rhNkpyIJLI9fuz_1G-5syjVMUectOQ_CMKYFKrdFalV-0zOuqgoGMVIUZGD-qu5qX-3nN1e7sz-uNsBne9kGx-fx5uLcw:1oJvQE:WHpwN-JM-vmL1q4Ivvaipqj707M/2 HTTP/1.1 
Host: loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         198.58.118.167
HTTP/1.1 302 Found
                                        
server: openresty/1.13.6.1
date: Fri, 05 Aug 2022 15:12:19 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.loneoakmarketing.com/?tm=1&subid4=1659712339.0362500000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0
x-mtm-path: 0
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=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:1oJyzr:2jeg8FaWSj1Drs6hwsOJoOzqTyk; expires=Fri, 05-Aug-2022 16:12:19 GMT; Max-Age=3600; Path=/
connection: close


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Fri, 05 Aug 2022 15:12:19 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /?tm=1&subid4=1659712339.0362500000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0 HTTP/1.1 
Host: www1.loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         75.2.73.197
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 05 Aug 2022 15:12:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket002
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_H3cG03NSdrK00MccJ8GE67Dm4zt8Y8kZXOb/vbg/EnnwLEvQxZ82sJhvaAjcCxJZrk0gg93XstoeSxgBf8o4sQ==
X-Template: tpl_Regnitz_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2996)
Size:   5176
Md5:    248decc36b8e653480b84f3476d1a8b0
Sha1:   928aa37f8d7226cb1c03ff5e326a9415a63d41f2
Sha256: 2d8c1efe8be54fe50631f4f5c0d8d59515abee380338a7df10f5436a6a20e56b

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 05 Aug 2022 14:33:29 GMT
Cache-Control: max-age=3600
Expires: Fri, 05 Aug 2022 14:29:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EaE2wtJQ50PN_QIZmv7lWwU-03ze7k1ORKppF_YFEg21eTgKdhJeMg==
Age: 3365


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /themes/assets/style.css HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/

                                         
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Fri, 05 Aug 2022 06:34:09 GMT
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Content-Encoding: gzip
ETag: W/"5ebab1f0-33d"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xibM5lxKun_FioRAQwCdEJGMr-h2rrqG55Q3PzTsA46PwImMOHxluQ==
Age: 31090


--- Additional Info ---
Magic:  ASCII text
Size:   343
Md5:    03a4a8c322fc0c99b0ee7cbbcc9eabcd
Sha1:   6fc193276de2a3458cd853c474cb9269b900e00d
Sha256: a535d2296792cb37a2bbad1d9d0546e3383a8a5bfac0d9edda15795c226bddf7
                                        
                                            GET /themes/regnitz_0f823431/style.css HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/

                                         
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Fri, 05 Aug 2022 02:16:46 GMT
Last-Modified: Fri, 25 Feb 2022 11:24:01 GMT
Content-Encoding: gzip
ETag: W/"6218bc51-4ec"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lcLOuJg77izdFwwMih7ciLNoFoMx1SFox-BYKa8DNENjQ-TnNfsmPw==
Age: 46533


--- Additional Info ---
Magic:  ASCII text
Size:   539
Md5:    3138e35c7232f3c11463560722a0ac79
Sha1:   b3e50fa997933e788c1a8800b347ba592b2ff913
Sha256: b53565fe44fb5034ed78e704aee57c620c37819a13286af740aab63b41550d46
                                        
                                            GET /scripts/js3caf.js HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/

                                         
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 7000
Connection: keep-alive
Server: nginx
Date: Fri, 05 Aug 2022 00:50:16 GMT
Last-Modified: Thu, 14 Jan 2021 10:54:01 GMT
Accept-Ranges: bytes
ETag: "600022c9-1b58"
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: p_S8QB-vA293xlfMX-fpOVRZPGi5kdP4jpP_mUFHoEMtzVGtdVsi8w==
Age: 51723


--- Additional Info ---
Magic:  ASCII text, with very long lines (316)
Size:   7000
Md5:    cce7f943ec8e7b4ba13be4aba6b463d9
Sha1:   220f3e8ca723daa91fd040cf518991a65f2bf110
Sha256: ba5b7354353b0eec1637564dae072fee662a5b9862f6bf7ed5e60a5a76f2ef44
                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/

                                         
                                         142.250.74.164
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Fri, 05 Aug 2022 15:12:19 GMT
Expires: Fri, 05 Aug 2022 15:12:19 GMT
Cache-Control: private, max-age=3600
ETag: "3620590738234590352"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (2174)
Size:   53503
Md5:    0d1a3501973e7f7b2d4e465985af413e
Sha1:   5b2a1c6ef0837ab972de1924faaa5de6bf37481b
Sha256: eba3c79375312b0666f26d91a306197e3f9560d6bd22ca2335ecea947ef0b725
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2084
Cache-Control: max-age=149386
Date: Fri, 05 Aug 2022 15:12:19 GMT
Etag: "62eccfb9-1d7"
Expires: Sun, 07 Aug 2022 08:42:05 GMT
Last-Modified: Fri, 05 Aug 2022 08:07:21 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3fEgnGg2xLbA9nvb73WV9A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         54.148.62.24
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JOX8XEJ064SDLjhCwIBS2YuXZN8=

                                        
                                            GET /themes/regnitz_0f823431/img/arrows.png HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://d1lxhc4jvstzrp.cloudfront.net/themes/regnitz_0f823431/style.css

                                         
                                         54.230.245.39
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Fri, 05 Aug 2022 01:54:42 GMT
Last-Modified: Fri, 25 Feb 2022 11:24:01 GMT
Accept-Ranges: bytes
ETag: "6218bc51-2c6f"
X-Cache: Hit from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: R3BnsncSBxFAUyShrBWSHdDxadlIvYX5kQj7MWUfCHg8tA5GQULT7g==
Age: 47858


--- Additional Info ---
Magic:  PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data
Size:   11375
Md5:    0cb2e5165dc9324eb462199f04e1ffa9
Sha1:   9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
Sha256: 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www1.loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/?tm=1&subid4=1659712339.0362500000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0

                                         
                                         75.2.73.197
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Fri, 05 Aug 2022 15:12:20 GMT
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /track.php?domain=loneoakmarketing.com&toggle=browserjs&uid=MTY1OTcxMjMzOS41NTYzOjg4OWIxZWNhOTRkM2RmMWQ3MzBjZDFhN2FlNTc4MzlhYWExMmEyMjI0MTZlNTkxNGFhY2NlNjE5M2EwMmM1YTU6NjJlZDMzNTM4N2NmYg%3D%3D HTTP/1.1 
Host: www1.loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/?tm=1&subid4=1659712339.0362500000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0

                                         
                                         75.2.73.197
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 05 Aug 2022 15:12:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  data
Size:   20
Md5:    a4745abc5e7fdb89cc6df3069f3c6e69
Sha1:   74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 05 Aug 2022 15:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /afs/ads?adtest=off&psid=1420240428&pcsa=false&channel=000001%2C000003%2C001074%2Cbucket002&client=dp-teaminternet12_3ph&r=m&hl=no&terms=Digital%20Marketing%20Services%2CSocial%20Media%20Marketing%2CBusiness%20Lead%20Generation%2CBrand%20Management%20Platform%2CEmail%20Marketing%20Automation%20System&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2983123576258743&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300953%2C17300956%2C17301068%2C17301071&format=r5%7Cs&nocache=2491659712340738&num=0&output=afd_ads&domain_name=www1.loneoakmarketing.com&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1659712340739&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=760&frm=0&uio=--&cont=tc&jsid=caf&jsv=464605827&rurl=http%3A%2F%2Fwww1.loneoakmarketing.com%2F%3Ftm%3D1%26subid4%3D1659712339.0362500000%26kw%3DDigital%2BMarketing%26KW1%3DDigital%2520Marketing%2520Services%26KW2%3DSocial%2520Media%2520Marketing%26KW3%3DBusiness%2520Lead%2520Generation%26KW4%3DBrand%2520Management%2520Platform%26KW5%3DEmail%2520Marketing%2520Automation%2520System%26searchbox%3D0%26domainname%3D0%26backfill%3D0&adbw=master-1%3A530 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
                                        
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Fri, 05 Aug 2022 15:12:20 GMT
expires: Fri, 05 Aug 2022 15:12:20 GMT
cache-control: private, max-age=3600
content-encoding: br
server: gws
content-length: 2282
x-xss-protection: 0
set-cookie: CONSENT=PENDING+913; expires=Sun, 04-Aug-2024 15:12:20 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7034)
Size:   2282
Md5:    d711971187c2b2ad80a09f18ada9f11c
Sha1:   39cd92226a27db14bce67740963d1108ded8f939
Sha256: 56b48a2181aa7b8767c3c8d0a11e9f981c3cafa982939d223e51ca34318ea4ba
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 05 Aug 2022 15:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gampad/cookie.js?domain=www1.loneoakmarketing.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie HTTP/1.1 
Host: partner.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.98
HTTP/2 200 OK
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 05 Aug 2022 15:12:20 GMT
server: cafe
cache-control: private
content-length: 190
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   190
Md5:    53a0af16cac160c04eeb8b249510db99
Sha1:   b361608fd5e72b8764e7066f9e001f946e2b2155
Sha256: 559639eccd953e40daac06f489346f0cd80aed9bf5ddb66215c08d9ff0ff586c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 05 Aug 2022 15:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 05 Aug 2022 15:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 05 Aug 2022 15:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 05 Aug 2022 15:12:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         142.250.74.164
HTTP/2 200 OK
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 05 Aug 2022 15:12:20 GMT
expires: Fri, 05 Aug 2022 15:12:20 GMT
cache-control: private, max-age=3600
etag: "7709064462229110004"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2174)
Size:   53618
Md5:    b7fc0cef0fa3eb3bb61f28feff734202
Sha1:   da0f82780e54f874b59e71404fe22ad525953856
Sha256: 00f01101ecfc0b53325bc48080abbf1ac7f49eeb815b60ae4c833dad8a5ef70c
                                        
                                            GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.1
HTTP/2 200 OK
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Fri, 05 Aug 2022 03:16:23 GMT
expires: Sat, 06 Aug 2022 02:16:23 GMT
cache-control: public, max-age=82800
age: 42958
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
content-type: image/svg+xml
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   174
Md5:    4de8b85c8915995b571bde50e231be7c
Sha1:   29c226ca7b9cbe1d44e5480ce95bbb42727b2d99
Sha256: 2ec9168c4507546748c5f400f5030031f0eb06f2aed8deaa11362c395bff4f7a
                                        
                                            POST /ls.php HTTP/1.1 
Host: www1.loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 2826
Origin: http://www1.loneoakmarketing.com
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/?tm=1&subid4=1659712339.0362500000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0

                                         
                                         75.2.73.197
HTTP/1.1 201 Created
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Fri, 05 Aug 2022 15:12:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 62ed33545ac5234ebd6d97a8
Charset: utf-8
Access-Control-Allow-Origin: http://www1.loneoakmarketing.com
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_SS2EBg03XzfOYas/xufHFlpILxgpt7G5GunrlilHAaP7rum/psY4Y4l/TO7dLatEQPTrtWPBCH7juAItBPOtwA==


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 05 Aug 2022 15:12:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /track.php?domain=loneoakmarketing.com&caf=1&toggle=answercheck&answer=yes&uid=MTY1OTcxMjMzOS41NTYzOjg4OWIxZWNhOTRkM2RmMWQ3MzBjZDFhN2FlNTc4MzlhYWExMmEyMjI0MTZlNTkxNGFhY2NlNjE5M2EwMmM1YTU6NjJlZDMzNTM4N2NmYg%3D%3D HTTP/1.1 
Host: www1.loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/?tm=1&subid4=1659712339.0362500000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0
Cookie: __gsas=ID=43e983312c443439:T=1659712340:S=ALNI_MYp2FAkiu2GlDVKhd9Ke3J9nCwZSg

                                         
                                         75.2.73.197
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 05 Aug 2022 15:12:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: answercheck
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  data
Size:   20
Md5:    a4745abc5e7fdb89cc6df3069f3c6e69
Sha1:   74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D129895DD82ACE0D70FE0D261B7C2E924E869686CEDF20C238EFA6BFDF5E632"
Last-Modified: Wed, 03 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4369
Expires: Fri, 05 Aug 2022 16:25:10 GMT
Date: Fri, 05 Aug 2022 15:12:21 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D129895DD82ACE0D70FE0D261B7C2E924E869686CEDF20C238EFA6BFDF5E632"
Last-Modified: Wed, 03 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4369
Expires: Fri, 05 Aug 2022 16:25:10 GMT
Date: Fri, 05 Aug 2022 15:12:21 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D129895DD82ACE0D70FE0D261B7C2E924E869686CEDF20C238EFA6BFDF5E632"
Last-Modified: Wed, 03 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4369
Expires: Fri, 05 Aug 2022 16:25:10 GMT
Date: Fri, 05 Aug 2022 15:12:21 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc784bce7-8d03-4e3d-9cb0-d693727bdedd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 12738
x-amzn-requestid: 75aa2a01-23f9-4d26-9393-0e34bdb7d919
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WW5NRF3DIAMFliA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ec3bee-129cb6d10824a106136f1901;Sampled=0
x-amzn-remapped-date: Thu, 04 Aug 2022 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Hit from cloudfront
x-amz-cf-id: zCQQHy19EggGF1tdmZM8bsFtgu2HFsgt7x7SZQkUD5_Yu1gg8HHAgQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 9b34a4c8b07eed6c2ff20b5adbbfa7c4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 04 Aug 2022 21:40:29 GMT
age: 63112
etag: "9f64c3f3eb43707d06563dfbc45973fd8cec914f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12738
Md5:    0cc5d2ca53e113f75d06592dc99af438
Sha1:   9f64c3f3eb43707d06563dfbc45973fd8cec914f
Sha256: 26c5a16d97987bce61cbaab0c193d70f6700d39d2b5ec35b34a0745dd776e735
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bda9d1d-e7d2-4beb-b172-566cac219173.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 6163
x-amzn-requestid: 926980e1-e103-415d-806c-affc9b623e25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WW5JCGDwIAMFa4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ec3bd3-037ec4ca0d11ca397ca087bf;Sampled=0
x-amzn-remapped-date: Thu, 04 Aug 2022 21:36:19 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Miss from cloudfront
x-amz-cf-id: Pjt1WG05kEIbpju9FEaj7GW46g1C8JDZS9k9BJ0JvtO2bfRzpjSo6w==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 e94af8eda63444d7836dbe832a0a5c54.cloudfront.net (CloudFront), 1.1 google
date: Thu, 04 Aug 2022 21:40:35 GMT
etag: "fa8b28cdfe5354ac9167a3d6f9483598c01157a5"
content-type: image/jpeg
age: 63106
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6163
Md5:    e7a0cfb1de3d318660096ee50bd33b69
Sha1:   fa8b28cdfe5354ac9167a3d6f9483598c01157a5
Sha256: b46f623cdc849a089e3734ec6ac559b0d04400f07dad90919afbb5fb0297a513
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44742514-d09b-47c6-b87d-280489ead14e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9292
x-amzn-requestid: c6a6620d-ba85-449e-a929-fb7d2b692c6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WW5OTFm9oAMFuQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ec3bf4-446d4a213934612121414e0e;Sampled=0
x-amzn-remapped-date: Thu, 04 Aug 2022 21:36:52 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Hit from cloudfront
x-amz-cf-id: uUVfUqH07GN8mlzoBzwe9YlC3IPophf7cXaB32p-Jvc9OA0uV9YXJg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 040bad3c7f7db09654c66da40c719fb0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 04 Aug 2022 21:40:35 GMT
age: 63106
etag: "969984181328d015607367853b091829686da82f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9292
Md5:    34a74b92d9fc09b11d5e239c1f7238d8
Sha1:   969984181328d015607367853b091829686da82f
Sha256: 09c99cdf79f21a52764e9c264ce1da90b0e74ddd28b1bba5bc3fc3f208570a66
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a5534e-9801-465a-96f2-766e87153fdf.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10876
x-amzn-requestid: 9a0a5e75-6e57-4de8-b478-a8919b69dc3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WREGbHBIIAMF68w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62e9e6f5-10b310e1661fa629091afaa5;Sampled=0
x-amzn-remapped-date: Wed, 03 Aug 2022 03:09:41 GMT
x-amz-cf-pop: YVR50-C1
x-cache: Hit from cloudfront
x-amz-cf-id: u4vkonvRIwC3WvAdd07v-guyqYvT1RkCA-pUaZW6tWgKYnPP6eU08w==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 5c6526bb54cf9233578cb72c28111052.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 03:46:52 GMT
age: 41129
etag: "edbc581f04ef31a8ed767099ec75036fbf8325aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10876
Md5:    509c8b427f9f5d83e4151c7fdbf41584
Sha1:   edbc581f04ef31a8ed767099ec75036fbf8325aa
Sha256: 332aeca25dca05eec3575a3523401f1a1b8d47be703c75341154fdae9e7b8fc6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9874fcc-fce2-4d50-9f55-fcde28b2b003.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9340
x-amzn-requestid: 7cef9d2a-be55-4200-9355-baf5020266ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WLA9-GEKoAMFkjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62e77b8c-5114885735fd281b26a3f22c;Sampled=0
x-amzn-remapped-date: Mon, 01 Aug 2022 07:06:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZD6XNIA5hrblAdJ0LIHZyVXP5rpFctgvOswjkF0OQo2M-UsW8ydTfw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 08:34:58 GMT
age: 23843
etag: "de136af89b4d753bf7effbd29fb4cc308cf4eeea"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9340
Md5:    1d70a058974c247287d0ba91ef0d87b7
Sha1:   de136af89b4d753bf7effbd29fb4cc308cf4eeea
Sha256: 83647edeedb85710e85517a44c1d6b94d785de733ca532ac0754029fed32642f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1057fe2-29ba-457b-9cf8-a234d92efec8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9802
x-amzn-requestid: 5d2b8270-54d1-42f9-8f30-2ba46184e921
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WGdt6HYCoAMFRYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62e5a98c-196c49631f4d857d1a9784db;Sampled=0
x-amzn-remapped-date: Sat, 30 Jul 2022 21:58:36 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4eX7KV0KW8RCbbJyLlenfANDVpvrGD-zBXY-9drPbZQNQRwd3pk2gg==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Thu, 04 Aug 2022 22:12:34 GMT
age: 61187
etag: "878a6a256d44c3720bf58ac36dbecc49f2417831"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9802
Md5:    218403b6db6a6973524905fd4aebaaa0
Sha1:   878a6a256d44c3720bf58ac36dbecc49f2417831
Sha256: d60dcca1085372c4e3960f22b58f24831ee73f30f4876a40adf41db4ea29eabd