adserver.crescendo.ma/
94.23.45.221302 Found 0 B IP 94.23.45.221:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Location: http://adserver.crescendo.ma/www/admin/index.php
X-Powered-By: PHP/7.1.33, PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash c9df6b36bf16969ac566c1b798362e4a
e56eff34815153ae019a4bf63eb9746dd9ae2e5b
33c1175144ab2be42c9de383f7893a6e60cd1f21f282eacb413d546331db3fa0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Retry-After, Alert, Content-Type, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 15 Oct 2022 00:50:00 GMT
Expires: Sat, 15 Oct 2022 01:23:10 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mB4TGiiuOmXog4Fg8ojiTdshRtJsvf00s9zogV0S0GCUl0RdCsRxMA==
Age: 2161
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2b424d8c01b211c56d5b44b92e4e4153
b1fdab18f23271eee58ae1482f8af25badc2ffda
1c82a5fd2bc3f16a66becb5e1924e8c9edd39386622dc2e5ed296442f4307b2b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C82A5FD2BC3F16A66BECB5E1924E8C9EDD39386622DC2E5ED296442F4307B2B"
Last-Modified: Fri, 14 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6772
Expires: Sat, 15 Oct 2022 03:18:53 GMT
Date: Sat, 15 Oct 2022 01:26:01 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bce7a9c1ff7500c4cfad5c3a3581a939
74b8dadf6ead0ce5d1d72e40a2eac554c5f5430c
6c840089371a0e25d60d0d76d6400348b0cdfb5967876c7b88e2b4a2aaf01a03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6C840089371A0E25D60D0D76D6400348B0CDFB5967876C7B88E2B4A2AAF01A03"
Last-Modified: Wed, 12 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8236
Expires: Sat, 15 Oct 2022 03:43:17 GMT
Date: Sat, 15 Oct 2022 01:26:01 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: T26/9ZPiDyi7KQ0GB2MXj/sioSPl8I+UrpFeZ8PvGlu4VkUDvU0OsURFqsLfDi4Zc8R5+NOjUZ4YZjaJzPGL7A==
x-amz-request-id: B7TA4Z9SZ6RTXGES
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 15 Oct 2022 00:34:25 GMT
age: 3096
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 15 Oct 2022 01:26:01 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
adserver.crescendo.ma/www/admin/index.php
94.23.45.221200 OK 4.1 kB URL HTTP/1.1 adserver.crescendo.ma/www/admin/index.php
IP 94.23.45.221:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 3cbed4ba75c89c9909ea42d38357acaf
cb1271e9f4fdcf4c9cb3ec7102a0e3230d03a008
8d9f0f8505281764067675c9e63eeb11c2bb81effa9a69716b0c1308a86d6d41
Analyzer Verdict Alert quad9 Sinkholed
GET /www/admin/index.php HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Pragma: no-cache
Expires: 0
Cache-Control: max-age=0, no-cache, proxy-revalidate, must-revalidate
Set-Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e; path=/www/admin; samesite=strict; domain=adserver.crescendo.ma; HttpOnly
X-Powered-By: PHP/7.1.33, PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
adserver.crescendo.ma/www/delivery/fl.js
94.23.45.221200 OK 5.6 kB URL HTTP/1.1 adserver.crescendo.ma/www/delivery/fl.js
IP 94.23.45.221:0
File type ASCII text, with very long lines (5590), with no line terminators
Hash 97f5314e58ecd41f147bc1b72529a9b4
80b7aa33ca9704bf6182208d1a3f17cec6e8be25
223b20f1ef4b5c4975608d2e2e462f15f7fa39f0c40c52ff1765b95e780ee72b
GET /www/delivery/fl.js HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/index.php
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 08:25:54 GMT
ETag: "15d6-5a08ffc1bc880"
Accept-Ranges: bytes
Content-Length: 5590
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
adserver.crescendo.ma/www/admin/assets/min.php?g=oxp-css-ltr&v=5.0.5
94.23.45.221200 OK 15 kB URL HTTP/1.1 adserver.crescendo.ma/www/admin/assets/min.php?g=oxp-css-ltr&v=5.0.5
IP 94.23.45.221:0
Hash 90320de2dff319bca08d8fa6ca33ddeb
104074f9b8d9cc8a4c8b655b64c525832dbb10e7
2122156aad0fd7810e36df52deccefd803af8a3fb3467416a7de96e51294315f
Analyzer Verdict Alert quad9 Sinkholed
GET /www/admin/assets/min.php?g=oxp-css-ltr&v=5.0.5 HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/index.php
Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Expires: Sat, 15 Oct 2022 01:56:01 GMT
Cache-Control: max-age=1800, public, must-revalidate
Content-Encoding: deflate
Vary: Accept-Encoding
Last-Modified: Wed, 11 Mar 2020 08:25:56 GMT
ETag: "1583915156pub"
Content-Length: 15117
X-Powered-By: PHP/7.1.33, PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css; charset=UTF-8
adserver.crescendo.ma/www/admin/assets/min.php?g=oxp-js&v=5.0.5
94.23.45.221200 OK 62 kB URL HTTP/1.1 adserver.crescendo.ma/www/admin/assets/min.php?g=oxp-js&v=5.0.5
IP 94.23.45.221:0
Hash 8ac93da4908e81606d2870ef5416d693
77d239bcd89c6d01657d15814e48ebb4d67e0549
8d0df11cfef2a09527914968e7a8022bf4fdb1dc8054bcbb035d22af28e5a3cb
GET /www/admin/assets/min.php?g=oxp-js&v=5.0.5 HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/index.php
Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Expires: Sat, 15 Oct 2022 01:56:01 GMT
Cache-Control: max-age=1800, public, must-revalidate
Content-Encoding: deflate
Vary: Accept-Encoding
Last-Modified: Wed, 11 Mar 2020 08:25:56 GMT
ETag: "1583915156pub"
Content-Length: 61770
X-Powered-By: PHP/7.1.33, PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-javascript; charset=UTF-8
adserver.crescendo.ma/www/admin/assets/images/login-welcome.gif
94.23.45.221200 OK 4.4 kB URL HTTP/1.1 adserver.crescendo.ma/www/admin/assets/images/login-welcome.gif
IP 94.23.45.221:0
File type GIF image data, version 89a, 97 x 105\012- data
Hash 07277edfb38a4181c75541f7ee72e6e8
2edf2b6974fb9a5f83a08d851be48e593a55ec04
4bca92650d5a0060193c91594febbafee1ff8dd09c8567ceb0ef4f79e8b19c60
GET /www/admin/assets/images/login-welcome.gif HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/index.php
Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 08:25:56 GMT
ETag: "115b-5a08ffc3a4d00"
Accept-Ranges: bytes
Content-Length: 4443
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif
adserver.crescendo.ma/www/admin/assets/images/break-el.gif
94.23.45.221200 OK 49 B URL HTTP/1.1 adserver.crescendo.ma/www/admin/assets/images/break-el.gif
IP 94.23.45.221:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash c8071deeff65b286edbc240aedddaad8
9e562a93ca6f31e2c49b27729a06873306fdfd29
d69dfc32ebbedaf059187a62f92d70d4a6846bd329ccd8856102efa8a2f8de80
GET /www/admin/assets/images/break-el.gif HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/index.php
Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 08:25:54 GMT
ETag: "31-5a08ffc1bc880"
Accept-Ranges: bytes
Content-Length: 49
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sat, 15 Oct 2022 01:07:43 GMT
Expires: Sat, 15 Oct 2022 01:44:51 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xUWKOB1IqpqXiP9MDGfJf9A1JHGm_OdPvFl1w9xbLyNBEYgBHzmr-g==
Age: 1098
adserver.crescendo.ma/www/admin/assets/images/logo-adserver.png
94.23.45.221200 OK 1.8 kB URL HTTP/1.1 adserver.crescendo.ma/www/admin/assets/images/logo-adserver.png
IP 94.23.45.221:0
File type PNG image data, 270 x 32, 8-bit colormap, non-interlaced\012- data
Hash 021c443ac5267507cbeca11aa7769478
ddf5c2a3ca8962212b33e09d1a57a8fcb76cb666
b85eafa72977cc42c917f4c37a774e6c142bad0fc3d3d635a37b771ce5255fb5
Analyzer Verdict Alert quad9 Sinkholed
GET /www/admin/assets/images/logo-adserver.png HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/assets/min.php?g=oxp-css-ltr&v=5.0.5
Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 08:25:54 GMT
ETag: "735-5a08ffc1bc880"
Accept-Ranges: bytes
Content-Length: 1845
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
adserver.crescendo.ma/www/admin/assets/images/tab-body.gif
94.23.45.221200 OK 390 B URL HTTP/1.1 adserver.crescendo.ma/www/admin/assets/images/tab-body.gif
IP 94.23.45.221:0
File type GIF image data, version 89a, 23 x 109\012- data
Hash 2e87b6a2affd02ff786b0422c5f79de8
02a7458a8ed2f1244eb96ddc25f5945b23d9b700
1864bd7e780db7366a093c16aad074860b7551674c69a0421d92ed1b294926c7
Analyzer Verdict Alert quad9 Sinkholed
GET /www/admin/assets/images/tab-body.gif HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/assets/min.php?g=oxp-css-ltr&v=5.0.5
Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 08:25:54 GMT
ETag: "186-5a08ffc1bc880"
Accept-Ranges: bytes
Content-Length: 390
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/gif
adserver.crescendo.ma/www/admin/assets/images/background-gradient.gif
94.23.45.221200 OK 285 B URL HTTP/1.1 adserver.crescendo.ma/www/admin/assets/images/background-gradient.gif
IP 94.23.45.221:0
File type GIF image data, version 89a, 20 x 97\012- data
Hash eee69740c7fdc1d3bd2493dc395df1c2
902498796c5f82153119e8508922171a6e97b17e
f4a0916d29e58d17e20bdeafea3803103a52a5235aa8b00c768b7c25e86d7f99
GET /www/admin/assets/images/background-gradient.gif HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/assets/min.php?g=oxp-css-ltr&v=5.0.5
Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 08:25:54 GMT
ETag: "11d-5a08ffc1bc880"
Accept-Ranges: bytes
Content-Length: 285
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/gif
adserver.crescendo.ma/www/admin/assets/images/tab-lead-in.gif
94.23.45.221200 OK 447 B URL HTTP/1.1 adserver.crescendo.ma/www/admin/assets/images/tab-lead-in.gif
IP 94.23.45.221:0
File type GIF image data, version 89a, 11 x 69\012- data
Hash 46409d0ace44bc87a1093d99ae7f7612
c6fcfa7989d050809d7b67d6b695c69021de088a
c94963b91c5b0287d449b5a4f5fb9e1a043333ff8ec376096b592c9df7f40cdd
Analyzer Verdict Alert quad9 Sinkholed
GET /www/admin/assets/images/tab-lead-in.gif HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/assets/min.php?g=oxp-css-ltr&v=5.0.5
Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 08:25:54 GMT
ETag: "1bf-5a08ffc1bc880"
Accept-Ranges: bytes
Content-Length: 447
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif
adserver.crescendo.ma/www/admin/assets/images/tab-lead-out.gif
94.23.45.221200 OK 450 B URL HTTP/1.1 adserver.crescendo.ma/www/admin/assets/images/tab-lead-out.gif
IP 94.23.45.221:0
File type GIF image data, version 89a, 11 x 69\012- data
Hash 3cdaadd0799b8d4ec26a718a322ea31e
bddcd228ad7199fed6bad5e152806c41a15a0898
9afdef5303a081607b73c4d93e292a45051a1dd4ed3c0d2231581bb80ca7d0a6
GET /www/admin/assets/images/tab-lead-out.gif HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/assets/min.php?g=oxp-css-ltr&v=5.0.5
Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 08:25:54 GMT
ETag: "1c2-5a08ffc1bc880"
Accept-Ranges: bytes
Content-Length: 450
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/gif
adserver.crescendo.ma/www/admin/assets/images/favicon.ico
94.23.45.221200 OK 1.2 kB URL HTTP/1.1 adserver.crescendo.ma/www/admin/assets/images/favicon.ico
IP 94.23.45.221:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 68e952295d85ba552ebfbea67d2d5c4a
8a225f24160f16177b520ddc8055fec5d8d86e8b
60b352255446dd916454c7bcd5af965fc690fcf71a393034f02721c1da615ccd
GET /www/admin/assets/images/favicon.ico HTTP/1.1
Host: adserver.crescendo.ma
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://adserver.crescendo.ma/www/admin/index.php
Cookie: sessionID=89582b40b2edb60176c3f14ed2d19d5e
HTTP/1.1 200 OK
Date: Sat, 15 Oct 2022 01:26:01 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 08:25:54 GMT
ETag: "47e-5a08ffc1bc880"
Accept-Ranges: bytes
Content-Length: 1150
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 90336661a2936bdb9efcc26998693b34
bee3b0e35ce901bff835d43a0f22eb0765ab8264
717bf09925581cc0668632ad10dfc2b714e77f9ba2c3852e8cf3ead552fde950
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6387
Cache-Control: max-age=116836
Content-Type: application/ocsp-response
Date: Sat, 15 Oct 2022 01:26:02 GMT
Etag: "6349189b-1d7"
Expires: Sun, 16 Oct 2022 09:53:18 GMT
Last-Modified: Fri, 14 Oct 2022 08:06:51 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
44.237.239.70101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.237.239.70:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZRHXes6isoarPDElr44iAw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZlE/6jWJ+JEN+/GifMxD3MxmfLc=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 73b0059a5671ff189dccdeb345c3dfb6
89a89effe4d8e12b478b3abb9ae5e94a861d957d
673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14277
Expires: Sat, 15 Oct 2022 05:24:00 GMT
Date: Sat, 15 Oct 2022 01:26:03 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 73b0059a5671ff189dccdeb345c3dfb6
89a89effe4d8e12b478b3abb9ae5e94a861d957d
673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14277
Expires: Sat, 15 Oct 2022 05:24:00 GMT
Date: Sat, 15 Oct 2022 01:26:03 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 73b0059a5671ff189dccdeb345c3dfb6
89a89effe4d8e12b478b3abb9ae5e94a861d957d
673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14277
Expires: Sat, 15 Oct 2022 05:24:00 GMT
Date: Sat, 15 Oct 2022 01:26:03 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 73b0059a5671ff189dccdeb345c3dfb6
89a89effe4d8e12b478b3abb9ae5e94a861d957d
673eaa034fe322874455a7ea38197c02819882d0176d9ae3773eea63dd53e3b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "673EAA034FE322874455A7EA38197C02819882D0176D9AE3773EEA63DD53E3B0"
Last-Modified: Wed, 12 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14277
Expires: Sat, 15 Oct 2022 05:24:00 GMT
Date: Sat, 15 Oct 2022 01:26:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 54edb9ab897821172fc13756df376ee7
2010f9656d87e6f5220f131628c537720c3673e1
6694c1be0adf97fa77d1bfa29337d9e609b729a58d42e141e9bb55ed6367b1d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6ea4d5d-0df9-4cfe-a9fc-e70b8e32f8ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13261
x-amzn-requestid: dd760e09-701e-4956-9723-386edc97c694
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z0fH6FzIoAMFzJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6344deff-197cf4f048e146af5654d0bd;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 03:11:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FG87tXqLw2s9wd8SpMNGbYzroLHz4inDaCGnUMOUKhvEqSvqfBwR4A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 06:20:37 GMT
age: 68726
etag: "2010f9656d87e6f5220f131628c537720c3673e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a3b2ace-090c-4763-8c3d-485b06c6db7f.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a3b2ace-090c-4763-8c3d-485b06c6db7f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e1c7702a6206faeb2ca8f81c15ad37ff
a63ad4f69b8f59f00cf06e06096488bc10af9d74
392e67ad7cc5ee65f30cab488861ccd06770cd1230814095185f81e895d5000e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a3b2ace-090c-4763-8c3d-485b06c6db7f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4205
x-amzn-requestid: c94a4ce7-f219-4473-93f6-fdb6c506dbe0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z7EhLGItoAMFy4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6347813a-6cbcef6d3dd353dd21bb6080;Sampled=0
x-amzn-remapped-date: Thu, 13 Oct 2022 03:08:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: AKdqp_10qE7MirjRVuAi6u6TcSInX5My8o0acVl7bI4mWuHGLQaKDQ==
via: 1.1 79880188a81becf1687ba18c0e064230.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 03:55:44 GMT
age: 77419
etag: "a63ad4f69b8f59f00cf06e06096488bc10af9d74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0ccfd7-6dc6-469b-bee1-7de141fecb1c.jpeg
34.120.237.76200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0ccfd7-6dc6-469b-bee1-7de141fecb1c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 902f6b585d65d720ff096817ca1f2233
9b73cbeff3361c30600bea9f12a862ae2c4f1e01
8669095b4abaab1bbe1a9f65eb61e7caf713c36f8a24ed0979f482bb3356b79c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d0ccfd7-6dc6-469b-bee1-7de141fecb1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6454
x-amzn-requestid: 4774f611-4ee1-40e7-804b-229bfff6c5a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjS3MGmdoAMFqKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633dfe94-451518b50ab53f2538d0c13f;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 22:00:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2Ra0AP60Ts4OidLByrMWpcUixuPQZGP8QliETUca6vdyqZfO9oxGDQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 21:51:09 GMT
age: 12894
etag: "9b73cbeff3361c30600bea9f12a862ae2c4f1e01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8dd268c3-27b8-467e-bdc3-ab2dab1a3b6d.jpeg
34.120.237.76200 OK 3.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8dd268c3-27b8-467e-bdc3-ab2dab1a3b6d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 644dadbc61528fb78d6a4d37809a4da1
46c2110541fe6eec046efea92940d17b69e410dc
6cdb2203d1ddb0e17728a5cede16bb7cf058172b0c61ca6e5082a514a447bf88
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8dd268c3-27b8-467e-bdc3-ab2dab1a3b6d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3894
x-amzn-requestid: f46ef5cf-34c4-4024-a1cb-7a46985a0225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aA5pWEHeoAMFkKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6349d63b-26b43ef606fd070f153225a3;Sampled=0
x-amzn-remapped-date: Fri, 14 Oct 2022 21:35:55 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CpzNn6qKh_Sdq5Ff8t6jCRxBy8RSwHH3Gc6rq-eZsXV0Jgtz21Om3A==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 21:49:18 GMT
etag: "46c2110541fe6eec046efea92940d17b69e410dc"
content-type: image/jpeg
age: 13005
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07f9401d-a14e-4329-9b79-ed52e44260bc.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07f9401d-a14e-4329-9b79-ed52e44260bc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bdad7a647699e05b8d55c8b6dbbef17
c3280a2522d28ec5e59714243081d7e8b58d5b7f
2600ca42a01785b728a6094c67067fb7a8d596458afa58b4ef992a411c0a0e56
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07f9401d-a14e-4329-9b79-ed52e44260bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 87efc832-3e8a-4564-a511-cd85c8e9d28b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z1CmlG4eIAMF8Ww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634517c3-345231cf0f27df3324eebc3f;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 07:14:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DseUDkSIIH43zSsVhK-okfDZin5jAG879zx7YHXsblwXbt8lRTAduA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 17:49:30 GMT
age: 27393
etag: "c3280a2522d28ec5e59714243081d7e8b58d5b7f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03997513-5277-4522-89f8-818ae1af1ed4.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03997513-5277-4522-89f8-818ae1af1ed4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9605311cdd6ecc7e959369acac85f0c1
b1b31f7c2380fda954c3c7f622c0f6ab59e263a6
a296e70d90138f45fd69cd1c1333c1dba11a290f0d0d4058c59e1ebc47848270
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03997513-5277-4522-89f8-818ae1af1ed4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10564
x-amzn-requestid: b55c8d77-e8bb-4bbe-a672-332d3ba4a9eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZkGy5FrMoAMFgQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633e51ab-1fd3e756011e6f3d6ef3d249;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 03:55:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OWGlwjRs06nNHvIOk9sO4I6MZCrM1vIoYNyeeNXz7DjD4Q34w24BsA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 21:42:29 GMT
age: 13414
etag: "b1b31f7c2380fda954c3c7f622c0f6ab59e263a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 319cbf11bba3f159e5c9f606deded924
13f29acb7a694030fc2de0b42c0d95c4be49deb7
09aa7d94e4829f4daf33d5e2aed077afcc59628839c5d6e877172e8455879062
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 15855
x-amzn-requestid: c8171eaf-67b4-4179-9e69-36fe00ef3bfe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZhQU8HmcIAMFw0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633d2db9-2985178a31d0e8c430323a26;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 07:09:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Zo6PXcoqkbRgpug8ZDp-0Q9RtLAwpAOlASdtGT4KHy6Q9q-4HgLqfw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Fri, 14 Oct 2022 05:07:36 GMT
age: 73114
etag: "13f29acb7a694030fc2de0b42c0d95c4be49deb7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2