urlquery - report: track.rendan-compto.com/e289d639-f31a-40b6-9919-81134a404421

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2023-02-04 04:09:44 UTC	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2023-02-04 04:12:26 UTC	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2023-02-04 04:10:40 UTC	34.117.237.239
71.winprizes271.monster (23)	0	2022-12-04 06:44:12 UTC	2023-02-03 08:47:40 UTC	217.69.14.8	Unknown ranking
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2023-02-04 04:13:16 UTC	54.149.242.38
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2023-02-04 04:09:21 UTC	34.120.237.76
track.rendan-compto.com (1)	894514	2020-05-14 15:49:33 UTC	2023-02-04 04:09:38 UTC	18.195.128.171
r3.o.lencr.org (10)	344	2020-12-02 08:52:13 UTC	2023-02-04 04:09:18 UTC	95.101.11.115

Timestamp	Severity	Source IP	Destination IP	Alert
2023-02-04 20:11:47 UTC	2	Client IP	Internal IP	ET INFO DNS Query for Suspicious .icu Domain

Scan Date	Severity	Indicator	Comment
2023-02-04	2	track.rendan-compto.com/e289d639-f31a-40b6-9919-81134a404421	Malware

Date	UQ / IDS / BL	URL	IP
2023-03-05 20:17:05 +0000	0 - 1 - 0	consion-psyntax.icu/a33166bc-b0d0-4a69-8ef0-1 (...)	18.195.128.171
2023-03-02 04:16:12 +0000	0 - 1 - 1	trk.vmtrckhost.com/91d97949-bff9-448f-aaff-51 (...)	18.195.128.171
2023-02-16 20:29:12 +0000	0 - 1 - 1	prs.pinkyads.quest/1482fb46-866d-4c45-86e6-c7 (...)	18.195.128.171
2023-02-15 17:57:12 +0000	1 - 1 - 1	track.rendan-compto.com/e1994726-8ae0-4a7e-be (...)	18.195.128.171
2023-02-15 06:06:43 +0000	1 - 1 - 1	track.rendan-compto.com/9ed5687a-5907-4b78-81 (...)	18.195.128.171

Date	UQ / IDS / BL	URL	IP
2023-03-31 10:21:44 +0000	0 - 0 - 1	tracking.realmsly.com/news-16-06-22.zip	13.215.82.231
2023-03-31 10:20:54 +0000	0 - 2 - 1	cdn.pchelpsoft.com/pchelpsoft/PC_Cleaner.exe	54.230.111.6
2023-03-31 10:20:43 +0000	0 - 0 - 0	click.convertkit-mail4.com/5quoz0rrzlh7hv5g4w (...)	3.21.107.144
2023-03-31 10:12:02 +0000	0 - 2 - 0	d23iz4esrwkib6.cloudfront.net/lu/depot/ess/ld (...)	13.32.11.65
2023-03-31 10:11:58 +0000	0 - 2 - 0	d23iz4esrwkib6.cloudfront.net/logitech/contro (...)	54.230.245.161

Date	UQ / IDS / BL	URL	IP
2023-03-30 02:56:35 +0000	1 - 1 - 1	track.rendan-compto.com/9ed5687a-5907-4b78-81 (...)	18.195.195.71
2023-03-30 01:06:48 +0000	1 - 1 - 1	track.rendan-compto.com/1f1e2183-137e-49d6-91 (...)	18.195.195.71
2023-03-29 16:15:23 +0000	0 - 1 - 3	track.rendan-compto.com/f51061d7-0b90-450b-94 (...)	18.195.195.71
2023-03-28 15:59:04 +0000	1 - 1 - 0	track.rendan-compto.com/9ed5687a-5907-4b78-81 (...)	18.195.195.71
2023-03-28 08:54:00 +0000	1 - 1 - 0	track.rendan-compto.com/1aee6222-540a-43f9-b0 (...)	18.195.195.71

Date	UQ / IDS / BL	URL	IP
2023-03-30 05:02:09 +0000	1 - 0 - 0	af.prplp.solidhitadvertising.com/ms/spin/mm/2 (...)	13.245.72.63
2023-03-30 04:09:37 +0000	1 - 0 - 10	zmforever.digital/alwheelpropzm/index.html?br (...)	217.69.13.14
2023-03-30 03:33:50 +0000	1 - 0 - 10	pomazagifts.digital/alwheelprop/index.html?br (...)	217.69.13.14
2023-03-30 02:56:36 +0000	1 - 0 - 0	44.winprizes544.digital/myaff2icu/index.php	45.76.148.82
2023-03-30 02:56:35 +0000	1 - 1 - 1	track.rendan-compto.com/9ed5687a-5907-4b78-81 (...)	18.195.195.71

Request	Response
GET /e289d639-f31a-40b6-9919-81134a404421 HTTP/1.1 Host: track.rendan-compto.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: track.rendan-compto.com/e289d639-f31a-40b6-9919-81134a404421 FQDN: track.rendan-compto.com IP: 18.195.128.171 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 18.195.128.171 HTTP/1.1 302 Server: nginx Date: Sat, 04 Feb 2023 20:11:10 GMT Content-Length: 0 Connection: keep-alive Cache-Control: no-store, no-cache, pre-check=0, post-check=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://71.winprizes271.monster/frpp2/frpp4.html?city=Oslo&brand=Desktop&model=Desktop&browser=Firefox&cep=LXK_ORKD5f1oQOXZlSQsNVD-4jNkVVmT0suxRzVzcCffIeyf3398ZW1rXk_5MjDEjCPLQ26NrHLtHIY8OLwPXxFM5XymXvlp-F6k0eZUoy2M61TOG3UDFi6w3W4i_QIw9VMb2GgAPpQQHg7ri-vE42hqTSfjeR-5FydoVKaRqmMWOXGn8c0ytqJ_fWsIzCE6OO4yh3XgnhKhMqL3E6JpAJnrDo-UcCNODCDUeEuUDVyP-3vwHryiQMe4B5c8lLotaOD98VKmJh4xh1Vrdic0O4NIOAA5Qq08b2WBwL2SZyqSLGVZDe-7ijKwTbOZFvQAIQB66JNQju-Mkxk2UXFfH4oU4PZmsynSjFOg0hwgUUyWLmHR3t_zfgytHFnOd4Ap&lptoken=167d75b2547732b470c3 Pragma: no-cache Set-Cookie: e289d639-f31a-40b6-9919-81134a404421-v4=Q8fl4YTUHzjwwYVVXCPKju0AzjzWsBvFDhSaFapV50M; Max-Age=86400; Expires=Sun, 05-Feb-2023 20:11:10 GMT; Domain=track.rendan-compto.com; Path=/; HttpOnly cep-v4=_rfupOLVH7bSSSBuz-UyP52YVr0nrRMtrpGVpf9zi0LQEQwh2p16oPPMkvWwlICptqZ1lGk3JoiVVh_wC7e-nlH4QMnaTnrsAOnFPyDmhR0YY7CzC4KB_5GntpH6JGEfaOD6YmsuLHU0KAFH4f9wEILxT9xO5dQThkMSvm_1Hd3jWBnZkmmradUyjIU_jaPu33Xm4LyqdnOXvoGs-_rc6ZaoyLUBnEkNapwSU4GW36eXfJ0331h9mc9QkN78KX-PupOAEuyBg8mv_VdEeVUcfbuKUcCt3ncCO4AqkxYGDoX5MaueJfiw3qTix64IZhKXwc_d9FZ9hBizXI_kR8phcERc6oENIQ5HN7EtTjVPfYutJ0aNFyUXPlGH4efUZkqa; Max-Age=86400; Expires=Sun, 05-Feb-2023 20:11:10 GMT; Domain=track.rendan-compto.com; Path=/; HttpOnly --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - fortinet: Malware
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66" Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9397 Expires: Sat, 04 Feb 2023 22:47:47 GMT Date: Sat, 04 Feb 2023 20:11:10 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c21ba65e44ac95470c314e068e49a9eb Sha1: 17a13b13738993d889d4afa3d848dc63bf6eba64 Sha256: 9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF" Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20266 Expires: Sun, 05 Feb 2023 01:48:56 GMT Date: Sat, 04 Feb 2023 20:11:10 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 81713f952b51a865ad9764cde68e3fdb Sha1: 278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a Sha256: c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sat, 04 Feb 2023 19:43:39 GMT age: 1651 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 30db107dcf4380cef05efea409c2e6a3 Sha1: 96e6a306fbc07299aba64e5c14e2bfca35872fa9 Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64" Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17015 Expires: Sun, 05 Feb 2023 00:54:45 GMT Date: Sat, 04 Feb 2023 20:11:10 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: fb7b6b46e708ad73eaaa3c21e74569ae Sha1: 950663c025acad81556af5aa3022ecc9d55097fe Sha256: 763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: B68ZRoDTrd87I6Ii5+ywHI+zXsOjSkCcRvJ2sNUqWylNiFwACwh3JjM5oTkS18vudn0rjL3RhkU= x-amz-request-id: E90ERSZZVT03KX5R content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sat, 04 Feb 2023 19:52:57 GMT age: 1093 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 7b922915ebf1fa3639b333f994c74f24 Sha1: 144a3f80b98fd0652d4614f24cf6cbbee40f8938 Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /frpp2/pw_ix.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/pw_ix.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 470d5cef6a3bd96c4ed2bc3339391003885be4ef3538c73385352a58c3720aa8 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 31733 last-modified: Tue, 17 Jan 2023 02:46:35 GMT etag: "7bf5-5f26cb54abc64" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 501 x 501, 8-bit colormap, non-interlaced\012- data Size: 31733 Md5: 687acbbd3b26e14ec659bef6c3858cf1 Sha1: 896705dad7c2f80b6b8799b8fb0002dc24650726 Sha256: 470d5cef6a3bd96c4ed2bc3339391003885be4ef3538c73385352a58c3720aa8
GET /frpp2/ixo.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/ixo.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 99735d4ae8da195bf366a6e23a7c691ef5a79ac25f3914856281383959a699d7 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 13400 last-modified: Tue, 17 Jan 2023 02:46:29 GMT etag: "3458-5f26cb4eae90e" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 165 x 331, 8-bit colormap, non-interlaced\012- data Size: 13400 Md5: 125914bcab1f703d2a2e2de49e0fde1e Sha1: d35b3b048137bdcbc695501533a8768bda4f4776 Sha256: 99735d4ae8da195bf366a6e23a7c691ef5a79ac25f3914856281383959a699d7
GET /frpp2/ix-s.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/ix-s.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 12e62d8e269352e691cdcc7731ad26e56f04982f232dd8e57286e3a60a7967a4 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 10144 last-modified: Tue, 17 Jan 2023 02:46:28 GMT etag: "27a0-5f26cb4e470cc" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 150 x 236, 8-bit colormap, non-interlaced\012- data Size: 10144 Md5: 17cd5bb6f5b7a4c7591cc78a4d20f8a7 Sha1: 848f24b1da8e371259860938affe04bdde31c4d5 Sha256: 12e62d8e269352e691cdcc7731ad26e56f04982f232dd8e57286e3a60a7967a4
GET /frpp2/ix-g.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/ix-g.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 4826c561819ceec8d7972380df59d6d5dee387808555aeaf5d9fd8ca48e17e12 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 10304 last-modified: Tue, 17 Jan 2023 02:46:28 GMT etag: "2840-5f26cb4ddd94b" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 150 x 236, 8-bit colormap, non-interlaced\012- data Size: 10304 Md5: c48ab762c6a436fc9f9c5579be4783be Sha1: ceaaa7231cb97246b6e8bbefbf0f3207a6574a4d Sha256: 4826c561819ceec8d7972380df59d6d5dee387808555aeaf5d9fd8ca48e17e12
GET /frpp2/like_user_1.jpg HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/like_user_1.jpg FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: e7c85bfa7ba6d75dd0de72e51da2e185351ced82b32090ab35395766ef4849fa 217.69.14.8 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 1293 last-modified: Tue, 17 Jan 2023 02:46:30 GMT etag: "50d-5f26cb4f85691" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1293 Md5: 2aa0d43e70d60d76ac4bdff139f8c7cb Sha1: d7e3433297ad90f5d99249aee29b645265c9f3eb Sha256: e7c85bfa7ba6d75dd0de72e51da2e185351ced82b32090ab35395766ef4849fa
GET /frpp2/like_user_2.jpg HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/like_user_2.jpg FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd 217.69.14.8 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 1216 last-modified: Tue, 17 Jan 2023 02:46:30 GMT etag: "4c0-5f26cb4ff4bd3" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1216 Md5: f9299c2023539a8f27a6e1b12ed260e5 Sha1: 046baf9bcd1bbdf9d51ca63e3899ea2e7f5de0b2 Sha256: ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd
GET /frpp2/fr11.jpg HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/fr11.jpg FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 595477951b0c428fad356d6d0b8a304b12ef1c5d6b230916d9f0a6fc7af8e0ff 217.69.14.8 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 1190 last-modified: Tue, 17 Jan 2023 02:46:19 GMT etag: "4a6-5f26cb44eb88a" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1190 Md5: e9eb32fb80cd682d452e51783cc88003 Sha1: 31451e2d96c6723aa1198f155e8513bc7ff62fa6 Sha256: 595477951b0c428fad356d6d0b8a304b12ef1c5d6b230916d9f0a6fc7af8e0ff
GET /frpp2/fr12.jpg HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/fr12.jpg FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: abdb07cfdb4595c174d558a8477e7652d62a789114d16683412403a464aa5c4f 217.69.14.8 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 978 last-modified: Tue, 17 Jan 2023 02:46:19 GMT etag: "3d2-5f26cb45659ac" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 978 Md5: 423afa501fb8977251e4352c8450ad90 Sha1: 9af5c34e74d1ee5e711fe9ee8d8354182a26447b Sha256: abdb07cfdb4595c174d558a8477e7652d62a789114d16683412403a464aa5c4f
GET /frpp2/fr13.jpg HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/fr13.jpg FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 70f46dc5dcc090759550c88e5047f4a6b758870a6909fbef8fe95a1f349e422d 217.69.14.8 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 1002 last-modified: Tue, 17 Jan 2023 02:46:19 GMT etag: "3ea-5f26cb45be78d" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1002 Md5: af77518710a427e90cee22ed663af207 Sha1: cef68c8b21355888638674bd281fe95d51b9fc8f Sha256: 70f46dc5dcc090759550c88e5047f4a6b758870a6909fbef8fe95a1f349e422d
GET /frpp2/fr16.jpg HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/fr16.jpg FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: c41d3622d2c739ad9ff0e0daf60ea332128f09146eecf42b3cceb58e1e091ae6 217.69.14.8 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 1016 last-modified: Tue, 17 Jan 2023 02:46:21 GMT etag: "3f8-5f26cb4709872" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1016 Md5: a972f46e230d390a6bcad2d8c6e45db7 Sha1: 84fcd370a96c45c5fbc13c59125db34446428b75 Sha256: c41d3622d2c739ad9ff0e0daf60ea332128f09146eecf42b3cceb58e1e091ae6
GET /frpp2/fr17.jpg HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/fr17.jpg FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: ba45b558cbde5c9f380cd42c743c3462a9fa64cd3f25cfaca6f09cfc7cda4286 217.69.14.8 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 1104 last-modified: Tue, 17 Jan 2023 02:46:21 GMT etag: "450-5f26cb47616b3" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1104 Md5: fb9ac0b35a5774a3542d3b8c0472f706 Sha1: 7d4363606475252e2e5e072f9b0ae5f932dda4b9 Sha256: ba45b558cbde5c9f380cd42c743c3462a9fa64cd3f25cfaca6f09cfc7cda4286
GET /frpp2/fr14.jpg HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/fr14.jpg FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 40db1e9af3ce107c07e7d3b36a70a909457d06980e4323bf452994e14c632186 217.69.14.8 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 1049 last-modified: Tue, 17 Jan 2023 02:46:20 GMT etag: "419-5f26cb46388af" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1049 Md5: 57aa2bd5874cea886597267f1481580a Sha1: aaa3825bd04b7a1463c0220c8bd57866468d13f2 Sha256: 40db1e9af3ce107c07e7d3b36a70a909457d06980e4323bf452994e14c632186
GET /frpp2/fr15.jpg HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/fr15.jpg FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 053f30f84ad3dda95eae33e0bc08ff77c3c1dd88c8191717b3fa626cdfe3de47 217.69.14.8 HTTP/2 200 OK content-type: image/jpeg server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 1082 last-modified: Tue, 17 Jan 2023 02:46:20 GMT etag: "43a-5f26cb46906f0" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Size: 1082 Md5: c463cabd2973a66cf8fd4b6ee373f632 Sha1: cb8b457d04d0934eeedc88f40c19bb3dd057ae3a Sha256: 053f30f84ad3dda95eae33e0bc08ff77c3c1dd88c8191717b3fa626cdfe3de47
GET /frpp2/footer_right.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/footer_right.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: f044237e4439b415a4947127f26fb14b4d32cf1d32ff51fd8f0ff4d21d2692e5 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 4919 last-modified: Tue, 17 Jan 2023 02:46:18 GMT etag: "1337-5f26cb441b867" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 168 x 66, 8-bit colormap, non-interlaced\012- data Size: 4919 Md5: 0e786b7344ac0b63609290a3a415fc4f Sha1: c2e77827e895aaa13522f1c5c0ef79d4caef0bb2 Sha256: f044237e4439b415a4947127f26fb14b4d32cf1d32ff51fd8f0ff4d21d2692e5
GET /frpp2/clip_footer_3.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/clip_footer_3.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: ef3b8785199a0a640150a9d9ceb9b7cff2b118ee377ce36317d4a3e716bd944f 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 2460 last-modified: Tue, 17 Jan 2023 02:46:15 GMT etag: "99c-5f26cb41fd880" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 52 x 59, 8-bit colormap, non-interlaced\012- data Size: 2460 Md5: e1b626392882cc25b4d891afaa68afd4 Sha1: 454d7abdbc2548d04feb95436ea0ab4126b4f00b Sha256: ef3b8785199a0a640150a9d9ceb9b7cff2b118ee377ce36317d4a3e716bd944f
GET /frpp2/menu_2x.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://71.winprizes271.monster/frpp2/clean.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/menu_2x.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 455b82fa1e54fc88fe0699eabecb02155f1d6228e0ae3d7f72e1abe92dae8f3c 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 124 last-modified: Tue, 17 Jan 2023 02:46:33 GMT etag: "7c-5f26cb52a343c" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 40 x 36, 8-bit gray+alpha, non-interlaced\012- data Size: 124 Md5: 8f68efd9388ccd80b43759b2ed542305 Sha1: 9f2cf96efe3bdec2ab64bc51856619cc02958fe6 Sha256: 455b82fa1e54fc88fe0699eabecb02155f1d6228e0ae3d7f72e1abe92dae8f3c
GET /frpp2/notify_2x.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://71.winprizes271.monster/frpp2/clean.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/notify_2x.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 4566dd8f59a09f51415a7c8955f48f75298522fc6db554bc1a59ad79c3e3e314 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 229 last-modified: Tue, 17 Jan 2023 02:46:34 GMT etag: "e5-5f26cb537345f" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 36 x 32, 8-bit gray+alpha, non-interlaced\012- data Size: 229 Md5: 988234626ae7a880ed9c6a92f6336c0f Sha1: 173967c2b59baed4a06997d874aba32ab65da201 Sha256: 4566dd8f59a09f51415a7c8955f48f75298522fc6db554bc1a59ad79c3e3e314
GET /frpp2/spin_prize2.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://71.winprizes271.monster/frpp2/clean.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/spin_prize2.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 43f3e6d7e7b011430b39020bc5ff8fe6be2947100c597de44ca549ea96a0fd7c 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 2814 last-modified: Tue, 17 Jan 2023 02:46:36 GMT etag: "afe-5f26cb55e2528" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data Size: 2814 Md5: f278c8d30fc51b72e0774b9ecb49214c Sha1: 03b574db82b31ee5758eb5093fda8ea25d1b00d8 Sha256: 43f3e6d7e7b011430b39020bc5ff8fe6be2947100c597de44ca549ea96a0fd7c
GET /frpp2/action_icons_20px_2x.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://71.winprizes271.monster/frpp2/clean.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/action_icons_20px_2x.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 1726 last-modified: Tue, 17 Jan 2023 02:46:14 GMT etag: "6be-5f26cb40c219b" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 40 x 360, 8-bit colormap, non-interlaced\012- data Size: 1726 Md5: b699975b5fe73b087e711a33ff24ee1e Sha1: 0e33cc5c32a5e7d18440751e3946076664caaf53 Sha256: 4e06866c22bb275c6c4f01265e1f3e9f00fe9face9739f6531371d688a8e7a7e
GET /frpp2/comment_action_2x.png HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://71.winprizes271.monster/frpp2/clean.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/comment_action_2x.png FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5 217.69.14.8 HTTP/2 200 OK content-type: image/png server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT content-length: 641 last-modified: Tue, 17 Jan 2023 02:46:16 GMT etag: "281-5f26cb4266061" accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data Size: 641 Md5: e9b3872b3e63e19728176d45f0aa6986 Sha1: b638f89d5d80c4cd65327da973c52f778e30bd55 Sha256: a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sat, 04 Feb 2023 19:49:07 GMT age: 1324 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 2590935c4164087693e0faa7e2eb66dbdef984a6be8c4d8368ff6d508e0451a2 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "2590935C4164087693E0FAA7E2EB66DBDEF984A6BE8C4D8368FF6D508E0451A2" Last-Modified: Thu, 02 Feb 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21590 Expires: Sun, 05 Feb 2023 02:11:01 GMT Date: Sat, 04 Feb 2023 20:11:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 59feb4c435ae44abe141d4f64fbd6799 Sha1: c4ce2c0e721448701353b80a309f95d621fc38e7 Sha256: 2590935c4164087693e0faa7e2eb66dbdef984a6be8c4d8368ff6d508e0451a2
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698" Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15970 Expires: Sun, 05 Feb 2023 00:37:21 GMT Date: Sat, 04 Feb 2023 20:11:11 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: dedf9c519ac38c4bece9c5bc895787d7 Sha1: 4911175c3f8a435978c5301c33c7a99a5e00a1d5 Sha256: bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
GET /frpp2/clean.css HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/frpp2/clean.css FQDN: 71.winprizes271.monster IP: 217.69.14.8 HASH: 6f3410472e5435cae4b37b931deecaa797e7c2e56c6454684013c28c95fa088d 217.69.14.8 HTTP/2 200 OK content-type: text/css server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT vary: Accept-Encoding last-modified: Tue, 17 Jan 2023 02:46:15 GMT etag: W/"2b87-5f26cb419509e" content-encoding: br X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (11143), with no line terminators Size: 17212 Md5: 1cd822d62c3564de0f1f05bbe8b95e86 Sha1: a9ca59cc15e82d471ea3038662f9b84077c40055 Sha256: 6f3410472e5435cae4b37b931deecaa797e7c2e56c6454684013c28c95fa088d
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: ANUvDQg1pAtJP7sLhVvzkA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.149.242.38 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.149.242.38 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 0WHHzMOh0WBXcEHHQlPUfwgCMPA= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302" Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5385 Expires: Sat, 04 Feb 2023 21:40:57 GMT Date: Sat, 04 Feb 2023 20:11:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c14d3cf8ade0150a711f094be32ac474 Sha1: 11e7fb5487d364c5392e1594e09f5b49831043ea Sha256: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302" Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5385 Expires: Sat, 04 Feb 2023 21:40:57 GMT Date: Sat, 04 Feb 2023 20:11:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c14d3cf8ade0150a711f094be32ac474 Sha1: 11e7fb5487d364c5392e1594e09f5b49831043ea Sha256: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302" Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5385 Expires: Sat, 04 Feb 2023 21:40:57 GMT Date: Sat, 04 Feb 2023 20:11:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c14d3cf8ade0150a711f094be32ac474 Sha1: 11e7fb5487d364c5392e1594e09f5b49831043ea Sha256: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302" Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5385 Expires: Sat, 04 Feb 2023 21:40:57 GMT Date: Sat, 04 Feb 2023 20:11:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c14d3cf8ade0150a711f094be32ac474 Sha1: 11e7fb5487d364c5392e1594e09f5b49831043ea Sha256: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 95.101.11.115 HASH: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302 95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302" Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5385 Expires: Sat, 04 Feb 2023 21:40:57 GMT Date: Sat, 04 Feb 2023 20:11:12 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c14d3cf8ade0150a711f094be32ac474 Sha1: 11e7fb5487d364c5392e1594e09f5b49831043ea Sha256: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8527 x-amzn-requestid: 6a8c6487-6069-47d1-afa1-648626f85439 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fyDqqGg5oAMFV-A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63dd7fdd-0a772cde1e6fba6d7da97435;Sampled=0 x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:53 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: CHWhIpyzhoPtMUplzh1430Q9FfCM1wkTc_hQsgQk6InM9tYBPGYnNg== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Fri, 03 Feb 2023 22:05:44 GMT age: 79528 etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8527 Md5: 6661b7263315f5eb3cd2465f671e1fcd Sha1: b7b5831c6b3ccc41d7a980b6088adc10ff8785f1 Sha256: eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11565 x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fboIrFGboAMFyyQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0 x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w== via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google date: Sat, 04 Feb 2023 06:20:04 GMT age: 49868 etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11565 Md5: e366b32074025aaf60bbae8bdb08d330 Sha1: a52c2883bad98fa20333aa639a5dd3a5bf544c8e Sha256: 9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8211 x-amzn-requestid: 2df5779a-a808-46ec-9246-1a9b9bddd9e9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fmKLVHwroAMF72Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d8bd7b-3cfe97e07d17958836425784;Sampled=0 x-amzn-remapped-date: Tue, 31 Jan 2023 07:04:27 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: _VFg0FMYa1Dg55fLpJTwdX2uZXkYjZSFdbdAKqGQu7GF2dPiawKh1g== via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google date: Sat, 04 Feb 2023 07:29:26 GMT age: 45706 etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8211 Md5: 114e345e134986d7451148fcea31b29d Sha1: 541e878afee68c8802bb52b0cbbe5a5a0a185392 Sha256: 5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 5893d7e5b2fd9de92829b303c42d0c07ff32b3f6b8705b6f5b4a784315c8808e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5174 x-amzn-requestid: 35630c70-3bad-47b4-94bb-09c873632194 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fyD7EFAHIAMFQQQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63dd8046-317b1fbb3bee0f377697bf3d;Sampled=0 x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: OD5cy75AkNMwTIvIool2nKbKgr5Jpo1Plm_X_YPr3rdPbg86_V2fdA== via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google date: Fri, 03 Feb 2023 22:00:26 GMT age: 79846 etag: "1f14971d0cf979cc34ff191849dc43d86e8ac463" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5174 Md5: e5b4e4f15da3323c73974c3f1cdb5d74 Sha1: 1f14971d0cf979cc34ff191849dc43d86e8ac463 Sha256: 5893d7e5b2fd9de92829b303c42d0c07ff32b3f6b8705b6f5b4a784315c8808e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 018712a4d6734b84ac1777124f97dae4d93b1e5b297a5dcfe0955b52710b8a35 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10253 x-amzn-requestid: a90cb6b3-8a72-4b4b-b4f5-6dafc8c6752a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fyD7GGv5IAMFu8A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63dd8046-3ca59e7c52800a4e44bda8fd;Sampled=0 x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: jBxNmhfAeUgxg8w4XpQHZ1QoN9GatdUV7V7r2tHd7YePJYPHpesd2Q== via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google date: Fri, 03 Feb 2023 22:05:21 GMT age: 79551 etag: "d2de32b52e0d3f4fc6acaf687b3521294b01dc03" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10253 Md5: 392b61306c346508d3ac4a2f28218f9c Sha1: d2de32b52e0d3f4fc6acaf687b3521294b01dc03 Sha256: 018712a4d6734b84ac1777124f97dae4d93b1e5b297a5dcfe0955b52710b8a35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e78a83a4024e238bcdec3b9c4d5c12a99f49aabd57e34952f6a4cc8ed4422f55 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9141 x-amzn-requestid: ed7db574-6bca-4f3e-8879-c3e836549339 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fyD8zE5lIAMF1HA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63dd8051-4480112f11d4ced0037d1ad8;Sampled=0 x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:49 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: aKr85ooofBPeKkeJIDO5W_X5Rn6xnJlRHmVrs8tgBMYe3HQhobsm3w== via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google date: Fri, 03 Feb 2023 21:56:07 GMT age: 80105 etag: "8e674830a97d8ce3818132fda197db4f0289d316" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9141 Md5: f7101f6e43855cb76ce48271a847ffbd Sha1: 8e674830a97d8ce3818132fda197db4f0289d316 Sha256: e78a83a4024e238bcdec3b9c4d5c12a99f49aabd57e34952f6a4cc8ed4422f55
GET /frpp2/frpp4.html?city=Oslo&brand=Desktop&model=Desktop&browser=Firefox&cep=LXK_ORKD5f1oQOXZlSQsNVD-4jNkVVmT0suxRzVzcCffIeyf3398ZW1rXk_5MjDEjCPLQ26NrHLtHIY8OLwPXxFM5XymXvlp-F6k0eZUoy2M61TOG3UDFi6w3W4i_QIw9VMb2GgAPpQQHg7ri-vE42hqTSfjeR-5FydoVKaRqmMWOXGn8c0ytqJ_fWsIzCE6OO4yh3XgnhKhMqL3E6JpAJnrDo-UcCNODCDUeEuUDVyP-3vwHryiQMe4B5c8lLotaOD98VKmJh4xh1Vrdic0O4NIOAA5Qq08b2WBwL2SZyqSLGVZDe-7ijKwTbOZFvQAIQB66JNQju-Mkxk2UXFfH4oU4PZmsynSjFOg0hwgUUyWLmHR3t_zfgytHFnOd4Ap&lptoken=167d75b2547732b470c3 HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: 71.winprizes271.monster/frpp2/frpp4.html?city=Oslo&bran (...) FQDN: 71.winprizes271.monster IP: 217.69.14.8 217.69.14.8 HTTP/2 200 OK content-type: text/html server: nginx date: Sat, 04 Feb 2023 20:11:10 GMT vary: Accept-Encoding last-modified: Tue, 17 Jan 2023 02:46:24 GMT etag: W/"3d51-5f26cb4a880ff" content-encoding: br X-Firefox-Spdy: h2 --- Additional Info ---
GET /favicon.ico HTTP/1.1 Host: 71.winprizes271.monster User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: 71.winprizes271.monster/favicon.ico FQDN: 71.winprizes271.monster IP: 217.69.14.8 217.69.14.8 HTTP/2 404 Not Found content-type: text/html; charset=iso-8859-1 server: nginx date: Sat, 04 Feb 2023 20:11:11 GMT vary: Accept-Encoding content-encoding: br X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF" 

                                        
                                            
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=20266 

                                        
                                            
Expires: Sun, 05 Feb 2023 01:48:56 GMT 

                                        
                                            
Date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    81713f952b51a865ad9764cde68e3fdb

                                                Sha1:   278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a

                                                Sha256: c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64" 

                                        
                                            
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=17015 

                                        
                                            
Expires: Sun, 05 Feb 2023 00:54:45 GMT 

                                        
                                            
Date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    fb7b6b46e708ad73eaaa3c21e74569ae

                                                Sha1:   950663c025acad81556af5aa3022ecc9d55097fe

                                                Sha256: 763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
access-control-expose-headers: content-type 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /frpp2/ixo.png HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 13400 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:29 GMT 

                                        
                                            
etag: "3458-5f26cb4eae90e" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 165 x 331, 8-bit colormap, non-interlaced\012- data

                                                Size:   13400

                                                Md5:    125914bcab1f703d2a2e2de49e0fde1e

                                                Sha1:   d35b3b048137bdcbc695501533a8768bda4f4776

                                                Sha256: 99735d4ae8da195bf366a6e23a7c691ef5a79ac25f3914856281383959a699d7

                                        
                                            GET /frpp2/ix-g.png HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 10304 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:28 GMT 

                                        
                                            
etag: "2840-5f26cb4ddd94b" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 150 x 236, 8-bit colormap, non-interlaced\012- data

                                                Size:   10304

                                                Md5:    c48ab762c6a436fc9f9c5579be4783be

                                                Sha1:   ceaaa7231cb97246b6e8bbefbf0f3207a6574a4d

                                                Sha256: 4826c561819ceec8d7972380df59d6d5dee387808555aeaf5d9fd8ca48e17e12

                                        
                                            GET /frpp2/like_user_2.jpg HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 1216 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:30 GMT 

                                        
                                            
etag: "4c0-5f26cb4ff4bd3" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data

                                                Size:   1216

                                                Md5:    f9299c2023539a8f27a6e1b12ed260e5

                                                Sha1:   046baf9bcd1bbdf9d51ca63e3899ea2e7f5de0b2

                                                Sha256: ba0c57dd9fbd100462ac62c8c8b3156caf1283d250fb56ee8ce5b0f53e575ccd

                                        
                                            GET /frpp2/fr12.jpg HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 978 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:19 GMT 

                                        
                                            
etag: "3d2-5f26cb45659ac" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data

                                                Size:   978

                                                Md5:    423afa501fb8977251e4352c8450ad90

                                                Sha1:   9af5c34e74d1ee5e711fe9ee8d8354182a26447b

                                                Sha256: abdb07cfdb4595c174d558a8477e7652d62a789114d16683412403a464aa5c4f

                                        
                                            GET /frpp2/fr16.jpg HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 1016 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:21 GMT 

                                        
                                            
etag: "3f8-5f26cb4709872" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data

                                                Size:   1016

                                                Md5:    a972f46e230d390a6bcad2d8c6e45db7

                                                Sha1:   84fcd370a96c45c5fbc13c59125db34446428b75

                                                Sha256: c41d3622d2c739ad9ff0e0daf60ea332128f09146eecf42b3cceb58e1e091ae6

                                        
                                            GET /frpp2/fr14.jpg HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 1049 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:20 GMT 

                                        
                                            
etag: "419-5f26cb46388af" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data

                                                Size:   1049

                                                Md5:    57aa2bd5874cea886597267f1481580a

                                                Sha1:   aaa3825bd04b7a1463c0220c8bd57866468d13f2

                                                Sha256: 40db1e9af3ce107c07e7d3b36a70a909457d06980e4323bf452994e14c632186

                                        
                                            GET /frpp2/footer_right.png HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 4919 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:18 GMT 

                                        
                                            
etag: "1337-5f26cb441b867" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 168 x 66, 8-bit colormap, non-interlaced\012- data

                                                Size:   4919

                                                Md5:    0e786b7344ac0b63609290a3a415fc4f

                                                Sha1:   c2e77827e895aaa13522f1c5c0ef79d4caef0bb2

                                                Sha256: f044237e4439b415a4947127f26fb14b4d32cf1d32ff51fd8f0ff4d21d2692e5

                                        
                                            GET /frpp2/menu_2x.png HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://71.winprizes271.monster/frpp2/clean.css 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 124 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:33 GMT 

                                        
                                            
etag: "7c-5f26cb52a343c" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 40 x 36, 8-bit gray+alpha, non-interlaced\012- data

                                                Size:   124

                                                Md5:    8f68efd9388ccd80b43759b2ed542305

                                                Sha1:   9f2cf96efe3bdec2ab64bc51856619cc02958fe6

                                                Sha256: 455b82fa1e54fc88fe0699eabecb02155f1d6228e0ae3d7f72e1abe92dae8f3c

                                        
                                            GET /frpp2/spin_prize2.png HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://71.winprizes271.monster/frpp2/clean.css 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 2814 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:36 GMT 

                                        
                                            
etag: "afe-5f26cb55e2528" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 142 x 173, 8-bit colormap, non-interlaced\012- data

                                                Size:   2814

                                                Md5:    f278c8d30fc51b72e0774b9ecb49214c

                                                Sha1:   03b574db82b31ee5758eb5093fda8ea25d1b00d8

                                                Sha256: 43f3e6d7e7b011430b39020bc5ff8fe6be2947100c597de44ca549ea96a0fd7c

                                        
                                            GET /frpp2/comment_action_2x.png HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://71.winprizes271.monster/frpp2/clean.css 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
content-length: 641 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:16 GMT 

                                        
                                            
etag: "281-5f26cb4266061" 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 24 x 120, 8-bit colormap, non-interlaced\012- data

                                                Size:   641

                                                Md5:    e9b3872b3e63e19728176d45f0aa6986

                                                Sha1:   b638f89d5d80c4cd65327da973c52f778e30bd55

                                                Sha256: a3f59e07404f1745bed88a314113a86da376526e7e1e555c99b3e249178c6ba5

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "2590935C4164087693E0FAA7E2EB66DBDEF984A6BE8C4D8368FF6D508E0451A2" 

                                        
                                            
Last-Modified: Thu, 02 Feb 2023 15:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=21590 

                                        
                                            
Expires: Sun, 05 Feb 2023 02:11:01 GMT 

                                        
                                            
Date: Sat, 04 Feb 2023 20:11:11 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    59feb4c435ae44abe141d4f64fbd6799

                                                Sha1:   c4ce2c0e721448701353b80a309f95d621fc38e7

                                                Sha256: 2590935c4164087693e0faa7e2eb66dbdef984a6be8c4d8368ff6d508e0451a2

                                        
                                            GET /frpp2/clean.css HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:10 GMT 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
last-modified: Tue, 17 Jan 2023 02:46:15 GMT 

                                        
                                            
etag: W/"2b87-5f26cb419509e" 

                                        
                                            
content-encoding: br 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (11143), with no line terminators

                                                Size:   17212

                                                Md5:    1cd822d62c3564de0f1f05bbe8b95e86

                                                Sha1:   a9ca59cc15e82d471ea3038662f9b84077c40055

                                                Sha256: 6f3410472e5435cae4b37b931deecaa797e7c2e56c6454684013c28c95fa088d

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302" 

                                        
                                            
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5385 

                                        
                                            
Expires: Sat, 04 Feb 2023 21:40:57 GMT 

                                        
                                            
Date: Sat, 04 Feb 2023 20:11:12 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    c14d3cf8ade0150a711f094be32ac474

                                                Sha1:   11e7fb5487d364c5392e1594e09f5b49831043ea

                                                Sha256: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302" 

                                        
                                            
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5385 

                                        
                                            
Expires: Sat, 04 Feb 2023 21:40:57 GMT 

                                        
                                            
Date: Sat, 04 Feb 2023 20:11:12 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    c14d3cf8ade0150a711f094be32ac474

                                                Sha1:   11e7fb5487d364c5392e1594e09f5b49831043ea

                                                Sha256: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         95.101.11.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302" 

                                        
                                            
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5385 

                                        
                                            
Expires: Sat, 04 Feb 2023 21:40:57 GMT 

                                        
                                            
Date: Sat, 04 Feb 2023 20:11:12 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    c14d3cf8ade0150a711f094be32ac474

                                                Sha1:   11e7fb5487d364c5392e1594e09f5b49831043ea

                                                Sha256: 2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 11565 

                                        
                                            
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fboIrFGboAMFyyQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w== 

                                        
                                            
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 04 Feb 2023 06:20:04 GMT 

                                        
                                            
age: 49868 

                                        
                                            
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   11565

                                                Md5:    e366b32074025aaf60bbae8bdb08d330

                                                Sha1:   a52c2883bad98fa20333aa639a5dd3a5bf544c8e

                                                Sha256: 9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 5174 

                                        
                                            
x-amzn-requestid: 35630c70-3bad-47b4-94bb-09c873632194 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fyD7EFAHIAMFQQQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63dd8046-317b1fbb3bee0f377697bf3d;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: OD5cy75AkNMwTIvIool2nKbKgr5Jpo1Plm_X_YPr3rdPbg86_V2fdA== 

                                        
                                            
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 03 Feb 2023 22:00:26 GMT 

                                        
                                            
age: 79846 

                                        
                                            
etag: "1f14971d0cf979cc34ff191849dc43d86e8ac463" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5174

                                                Md5:    e5b4e4f15da3323c73974c3f1cdb5d74

                                                Sha1:   1f14971d0cf979cc34ff191849dc43d86e8ac463

                                                Sha256: 5893d7e5b2fd9de92829b303c42d0c07ff32b3f6b8705b6f5b4a784315c8808e

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcae6042d-d677-4e39-b4e4-858988eb847b.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9141 

                                        
                                            
x-amzn-requestid: ed7db574-6bca-4f3e-8879-c3e836549339 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: fyD8zE5lIAMF1HA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63dd8051-4480112f11d4ced0037d1ad8;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:49 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: aKr85ooofBPeKkeJIDO5W_X5Rn6xnJlRHmVrs8tgBMYe3HQhobsm3w== 

                                        
                                            
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 03 Feb 2023 21:56:07 GMT 

                                        
                                            
age: 80105 

                                        
                                            
etag: "8e674830a97d8ce3818132fda197db4f0289d316" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9141

                                                Md5:    f7101f6e43855cb76ce48271a847ffbd

                                                Sha1:   8e674830a97d8ce3818132fda197db4f0289d316

                                                Sha256: e78a83a4024e238bcdec3b9c4d5c12a99f49aabd57e34952f6a4cc8ed4422f55

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: 71.winprizes271.monster

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         217.69.14.8

                                        
                                            HTTP/2 404 Not Found 

                                        
                                            
content-type: text/html; charset=iso-8859-1

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 04 Feb 2023 20:11:11 GMT 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
content-encoding: br 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	track.rendan-compto.com/e289d639-f31a-40b6-9919-81134a404421
IP	18.195.128.171 (Germany)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2023-02-04 20:11:21 UTC
Status	Loading report..
IDS alerts	1
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (8)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 18.195.128.171

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: rendan-compto.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (17)

Executed Evals (1)

#1 JavaScript::Eval (size: 80) - SHA256: 66029734df3cbdd7757e9e445037e3789f5842f88c9536d6ffcf4f2e0f4cf92d

Executed Writes (4)

#1 JavaScript::Write (size: 24) - SHA256: 44baa2a35d7853816ed2e35743b303ee4f4f026479aa1b314b611f11bd6e1471

#2 JavaScript::Write (size: 6) - SHA256: 8b870e81d4a25bf6eca5d07074c0bc3d6c6a2496258f49390e066a4e672b669e

#3 JavaScript::Write (size: 7) - SHA256: 2f26233595d165e6868c5bb9e5e835506039e72c61a36a1bafb0827abfe746a5

#4 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Transactions (45)

Overview

Domain Summary (8)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 18.195.128.171

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: rendan-compto.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (17)

Executed Evals (1)

#1 JavaScript::Eval (size: 80) - SHA256: 66029734df3cbdd7757e9e445037e3789f5842f88c9536d6ffcf4f2e0f4cf92d

Executed Writes (4)

#1 JavaScript::Write (size: 24) - SHA256: 44baa2a35d7853816ed2e35743b303ee4f4f026479aa1b314b611f11bd6e1471

#2 JavaScript::Write (size: 6) - SHA256: 8b870e81d4a25bf6eca5d07074c0bc3d6c6a2496258f49390e066a4e672b669e

#3 JavaScript::Write (size: 7) - SHA256: 2f26233595d165e6868c5bb9e5e835506039e72c61a36a1bafb0827abfe746a5

#4 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Transactions (45)

Network Intrusion Detection Systems