Overview

URL loneoakmarketing.com/mtm/direct/.eJx1kE1zgjAURf8LS6sGxhlFOl1Y1PoBiANou3IyIWIkIRheKaHT_17a7jrt7r57z-a8d-NVMcMx0AWgdBCXBZU4F1jlFFiRDYkUSIBAKVOUABrSjVYHJkHzSCewrb3wWJlFArZrKjVW22A22vhzWqdrNSIvg9vcHwTuKkxSzLXFz1GSyCpi9tMtw5pxL04kREy75Bq2LK-Z3QRNsp6TItS2FbaLSTBZyN0kyX09Tb02Py3H-3YXC0vO9lKNj3V52HuzxxA24s2xinzhc8ddxh6YO1u4x-xqaXMll-xgxc9u5COjb2CVVZ1wlxQ9U0VVd_zI_2nfcRdZwanAgnbkPwgmhJbQ7UAb6H4peB-XJWcEA5MFar6au-Z3K_j97cEcTvs91PtOtvHxCQS-isc:1oAqNZ:tHW_p0PACUvLCNR4m3Do4qAoRJU/2
IP45.56.79.23
ASNLinode, LLC
Location United States
Report completed2022-07-11 10:11:29 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-07-11 2 loneoakmarketing.com/mtm/direct/.eJx1kE1zgjAURf8LS6sGxhlFOl1Y1PoBiANou3IyIW (...) Malware
2022-07-11 2 www1.loneoakmarketing.com/ls.php Malware
mnemonic secure dns  No alerts detected
Quad9 DNS
Added / Verified Severity Host Comment
2022-07-11 2 loneoakmarketing.com Sinkholed
2022-07-11 2 loneoakmarketing.com Sinkholed
2022-07-11 2 loneoakmarketing.com Sinkholed
2022-07-11 2 loneoakmarketing.com Sinkholed
2022-07-11 2 loneoakmarketing.com Sinkholed
2022-07-11 2 loneoakmarketing.com Sinkholed


Files

No files detected



Passive DNS (14)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] www.google.com (3) 7 2012-05-22 04:23:54 UTC 2022-07-11 03:41:32 UTC 142.250.74.164
[Mnemonic Passive DNS] r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-07-11 04:52:02 UTC 23.36.77.32
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.65
[Mnemonic Passive DNS] loneoakmarketing.com (1) 0 2018-12-10 10:25:07 UTC 2018-12-10 10:25:07 UTC 198.58.118.167 Unknown ranking
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-07-11 05:08:59 UTC 52.40.157.61
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-07-11 04:07:46 UTC 34.120.237.76
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-07-11 04:25:39 UTC 54.230.111.99
[Mnemonic Passive DNS] ocsp.digicert.com (1) 86 2012-11-29 12:49:49 UTC 2022-07-11 05:49:38 UTC 93.184.220.29
[Mnemonic Passive DNS] ocsp.pki.goog (6) 175 2017-06-14 07:23:31 UTC 2022-07-11 04:51:21 UTC 142.250.74.3
[Mnemonic Passive DNS] afs.googleusercontent.com (2) 12123 2017-01-30 05:39:23 UTC 2022-07-11 06:07:53 UTC 142.250.74.1
[Mnemonic Passive DNS] www1.loneoakmarketing.com (5) 0 2022-06-02 20:48:33 UTC 2022-07-11 05:07:06 UTC 75.2.73.197 Unknown ranking
[Mnemonic Passive DNS] d1lxhc4jvstzrp.cloudfront.net (4) 0 No data No data 54.230.245.55 Unknown ranking
[Mnemonic Passive DNS] partner.googleadservices.com (1) 798 2017-01-30 04:56:54 UTC 2022-07-11 04:54:37 UTC 142.250.74.98


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 45.56.79.23

Date UQ / IDS / BL URL IP
2022-08-14 02:19:13 +0000
0 - 0 - 2 retiresmat.com/ 45.56.79.23
2022-08-14 02:14:06 +0000
0 - 0 - 3 ksis.com/mtm/direct/.ejxdyuekwjaqheg7zlkgjsta (...) 45.56.79.23
2022-08-14 01:19:25 +0000
0 - 0 - 3 adidasssuperstars.us.com/-/home/no/b145210fec (...) 45.56.79.23
2022-08-14 01:15:42 +0000
0 - 0 - 3 adidasssuperstars.us.com/-/no/b587d15d7f98e45 (...) 45.56.79.23
2022-08-13 21:17:09 +0000
0 - 0 - 2 theraidernation.com/ 45.56.79.23
2022-08-13 20:55:01 +0000
0 - 0 - 2 sweetgirlsmovies.com/ 45.56.79.23
2022-08-13 20:22:09 +0000
0 - 0 - 1 midnightblue.com/mtm/direct/.eJxtikEOwjAMBP_i (...) 45.56.79.23
2022-08-13 20:18:15 +0000
0 - 0 - 3 lasikindenver.com/http:/lasikindenver.com/mtm (...) 45.56.79.23
2022-08-13 15:59:55 +0000
0 - 0 - 6 irp.com/mtm/direct/.ejxdydekwjamhef3yevwll3oi (...) 45.56.79.23
2022-08-13 15:50:40 +0000
0 - 0 - 3 mothertubevids.com/mtm/direct/.ejxtikeowjambp (...) 45.56.79.23

Last 10 reports on ASN: Linode, LLC

Date UQ / IDS / BL URL IP
2022-08-14 06:26:59 +0000
0 - 0 - 2 cheatshacksfreedownload.com/mtm/direct/.ejx9i (...) 198.58.118.167
2022-08-14 06:26:46 +0000
0 - 0 - 2 advanced-esthetic.us/http:/advanced-esthetic. (...) 198.58.118.167
2022-08-14 06:24:33 +0000
0 - 0 - 3 blackarse.com/mtm/direct/.ejxdikeowjambp_iy4l (...) 45.79.19.196
2022-08-14 06:23:47 +0000
0 - 0 - 2 tarotcanada.com/mtm/direct/.eJxliksKAkEMBe-S5 (...) 45.33.18.44
2022-08-14 06:22:02 +0000
0 - 0 - 2 tits.net/mtm/direct/.eJxdycEKwjAQhOF32WMNXY9a (...) 173.255.194.134
2022-08-14 06:19:07 +0000
0 - 0 - 3 indianmoviemall.com/ 45.33.30.197
2022-08-14 06:00:03 +0000
0 - 0 - 1 accessalohatravel.com/mtm/direct/.eJx1ikEKAjE (...) 72.14.185.43
2022-08-14 05:45:16 +0000
0 - 0 - 2 mothernature.one/wp-content/plugins/woocommer (...) 45.33.20.235
2022-08-14 05:16:47 +0000
0 - 0 - 1 athleticclearance.org/mtm/direct/.eJx1yssKwkA (...) 96.126.123.244
2022-08-14 04:57:56 +0000
0 - 0 - 2 totalfarm.com/ 45.33.23.183

Last 8 reports on domain: loneoakmarketing.com

Date UQ / IDS / BL URL IP
2022-08-06 00:29:16 +0000
0 - 0 - 8 loneoakmarketing.com/mtm/direct/.eJx1kMtugzAQ (...) 45.33.23.183
2022-08-05 15:12:29 +0000
0 - 0 - 8 loneoakmarketing.com/mtm/direct/.eJx1kMFygjAU (...) 45.33.2.79
2022-07-19 17:21:13 +0000
0 - 0 - 8 loneoakmarketing.com/mtm/direct/.eJx1kEtSwzAQ (...) 45.33.2.79
2022-07-14 04:07:02 +0000
0 - 0 - 14 loneoakmarketing.com/http:/loneoakmarketing.c (...) 45.33.20.235
2022-07-10 18:52:03 +0000
0 - 0 - 7 loneoakmarketing.com/mtm/direct/.eJx1kF1TgkAU (...) 45.33.23.183
2022-07-08 02:45:37 +0000
0 - 0 - 8 loneoakmarketing.com/mtm/direct/.eJx1kEtygzAQ (...) 45.33.20.235
2022-07-04 12:55:25 +0000
0 - 0 - 11 loneoakmarketing.com/http:/loneoakmarketing.c (...) 45.33.30.197
2022-06-30 13:04:57 +0000
0 - 0 - 14 loneoakmarketing.com/http:/loneoakmarketing.c (...) 45.56.79.23


JavaScript

Executed Scripts (19)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (40)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "313E3EEEC57DDB4BA8DEA53E120400F208283395B23B88CE1963A7A1FA812750"
Last-Modified: Sat, 09 Jul 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6890
Expires: Mon, 11 Jul 2022 12:06:06 GMT
Date: Mon, 11 Jul 2022 10:11:16 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Backoff, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 11 Jul 2022 10:03:42 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XIk6hn3hQdBCkZ5qRhcx0-MNoJvxQAfdp_4jR7sCpOLngHqNu5wwxg==
Age: 454


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    91dd975a7b17b2922dd23c0e49314e40
Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-08-10-12-10-21.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.99
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Tue, 21 Jun 2022 12:10:22 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 11 Jul 2022 07:33:13 GMT
etag: "581454acdd98f34fd3fbabd0977ade29"
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jmKR9EKvuhk4iNjWs2-PB4xy67E0KRUybZweirRENTniftuyarfcLw==
age: 18347
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    581454acdd98f34fd3fbabd0977ade29
Sha1:   d8d86c0b513137aeb85de01cea7b272c35eb6ab4
Sha256: e98f8f33ba5ed59c3cfdf2ae54957ed32652cf0899f3c8db4b5872e3ece1e4eb
                                        
                                            GET /mtm/direct/.eJx1kE1zgjAURf8LS6sGxhlFOl1Y1PoBiANou3IyIWIkIRheKaHT_17a7jrt7r57z-a8d-NVMcMx0AWgdBCXBZU4F1jlFFiRDYkUSIBAKVOUABrSjVYHJkHzSCewrb3wWJlFArZrKjVW22A22vhzWqdrNSIvg9vcHwTuKkxSzLXFz1GSyCpi9tMtw5pxL04kREy75Bq2LK-Z3QRNsp6TItS2FbaLSTBZyN0kyX09Tb02Py3H-3YXC0vO9lKNj3V52HuzxxA24s2xinzhc8ddxh6YO1u4x-xqaXMll-xgxc9u5COjb2CVVZ1wlxQ9U0VVd_zI_2nfcRdZwanAgnbkPwgmhJbQ7UAb6H4peB-XJWcEA5MFar6au-Z3K_j97cEcTvs91PtOtvHxCQS-isc:1oAqNZ:tHW_p0PACUvLCNR4m3Do4qAoRJU/2 HTTP/1.1 
Host: loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         198.58.118.167
HTTP/1.1 302 Found
                                        
server: openresty/1.13.6.1
date: Mon, 11 Jul 2022 10:11:16 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www1.loneoakmarketing.com/?tm=1&subid4=1657534276.0386540000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0
x-mtm-path: 0
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=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:1oAqNo:-t-Yrg0Gtk4L5DtPHjDCpsLfKT0; expires=Mon, 11-Jul-2022 11:11:16 GMT; Max-Age=3600; Path=/
connection: close


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Mon, 11 Jul 2022 10:11:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /?tm=1&subid4=1657534276.0386540000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0 HTTP/1.1 
Host: www1.loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         75.2.73.197
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 11 Jul 2022 10:11:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Buckets: bucket078
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_CbE52FCfgkjW+vCr4EDB2et9mTBt83kTNpaMssrA5kDND91GWNsWJReKZPuz4JHPp0+2GymANE6Qa4VrnJwwLQ==
X-Template: tpl_Regnitz_twoclick
X-Language: norwegian
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2964)
Size:   5191
Md5:    de6d66b4eb82d9615a6a60aa9afd35de
Sha1:   da52ea5ae047dd51b3dd10ace52c5305d2e3f21d
Sha256: ee5ff0c8b02333737e093be51031fc99effaa8b8e9dbf5345e8d770a47cd9876

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /scripts/js3caf.js HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/

                                         
                                         54.230.245.55
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Length: 7000
Connection: keep-alive
Server: nginx
Date: Mon, 11 Jul 2022 00:50:10 GMT
Last-Modified: Thu, 14 Jan 2021 10:54:01 GMT
Accept-Ranges: bytes
ETag: "600022c9-1b58"
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A8DuDymDNwzvTbW8Rvadl8oYFe5LLk8MaVehQ41noO9oSX_bk3EUaQ==
Age: 33667


--- Additional Info ---
Magic:  ASCII text, with very long lines (316)
Size:   7000
Md5:    cce7f943ec8e7b4ba13be4aba6b463d9
Sha1:   220f3e8ca723daa91fd040cf518991a65f2bf110
Sha256: ba5b7354353b0eec1637564dae072fee662a5b9862f6bf7ed5e60a5a76f2ef44
                                        
                                            GET /themes/assets/style.css HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/

                                         
                                         54.230.245.55
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Mon, 11 Jul 2022 06:34:08 GMT
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
Content-Encoding: gzip
ETag: W/"5ebab1f0-33d"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4cvxprpgruNy7bVSPR27JDZRs9GLuuHsRJsqbkNDWidyN-IBkzRMsw==
Age: 13029


--- Additional Info ---
Magic:  ASCII text
Size:   343
Md5:    03a4a8c322fc0c99b0ee7cbbcc9eabcd
Sha1:   6fc193276de2a3458cd853c474cb9269b900e00d
Sha256: a535d2296792cb37a2bbad1d9d0546e3383a8a5bfac0d9edda15795c226bddf7
                                        
                                            GET /themes/regnitz_0f823431/style.css HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/

                                         
                                         54.230.245.55
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Mon, 11 Jul 2022 02:16:22 GMT
Last-Modified: Fri, 25 Feb 2022 11:24:01 GMT
Content-Encoding: gzip
ETag: W/"6218bc51-4ec"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 05a2ZDk_c2a04f6sTsVqs5-Nzk-h0gGoae8CmawTXy3XMwQytcRwtw==
Age: 28495


--- Additional Info ---
Magic:  ASCII text
Size:   539
Md5:    3138e35c7232f3c11463560722a0ac79
Sha1:   b3e50fa997933e788c1a8800b347ba592b2ff913
Sha256: b53565fe44fb5034ed78e704aee57c620c37819a13286af740aab63b41550d46
                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/

                                         
                                         142.250.74.164
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Mon, 11 Jul 2022 10:11:17 GMT
Expires: Mon, 11 Jul 2022 10:11:17 GMT
Cache-Control: private, max-age=3600
ETag: "8234502739644126637"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (2174)
Size:   52904
Md5:    205bfbd3844bb26150a38efcb6eb18aa
Sha1:   e205e40f557ae0d1ab3b872149335710690bc4c1
Sha256: 0e21ab17fbb634eed3b7ee86132a06414e45f2e94438f487233e0b5936ad9b48
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.65
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 11 Jul 2022 09:47:43 GMT
Cache-Control: max-age=3600
Expires: Mon, 11 Jul 2022 10:47:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: W2WiUhWahKZepmLCmLvbhScP5e6HlTKmZZmwDCCk9R_yoD0ssRp9hw==
Age: 1414


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5743
Cache-Control: 'max-age=158059'
Date: Mon, 11 Jul 2022 10:11:17 GMT
Last-Modified: Mon, 11 Jul 2022 08:35:35 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y1Bq/alrAHsiB1VqoIPdAw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.40.157.61
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +MZIx8/uqAq3Aj+mkB9CsNl391E=

                                        
                                            GET /themes/regnitz_0f823431/img/arrows.png HTTP/1.1 
Host: d1lxhc4jvstzrp.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://d1lxhc4jvstzrp.cloudfront.net/themes/regnitz_0f823431/style.css

                                         
                                         54.230.245.55
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Mon, 11 Jul 2022 01:54:01 GMT
Last-Modified: Fri, 25 Feb 2022 11:24:01 GMT
Accept-Ranges: bytes
ETag: "6218bc51-2c6f"
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: d5ikBswQJz0mrwm5_kIZl-3k-codjenG0v9IhxFwNrVmGOqaBtUTlA==
Age: 29836


--- Additional Info ---
Magic:  PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data
Size:   11375
Md5:    0cb2e5165dc9324eb462199f04e1ffa9
Sha1:   9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
Sha256: 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www1.loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/?tm=1&subid4=1657534276.0386540000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0

                                         
                                         75.2.73.197
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Mon, 11 Jul 2022 10:11:17 GMT
Content-Length: 0
Connection: keep-alive
Server: nginx
Last-Modified: Tue, 12 May 2020 14:25:52 GMT
ETag: "5ebab1f0-0"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /track.php?domain=loneoakmarketing.com&toggle=browserjs&uid=MTY1NzUzNDI3Ni44MDg6YTQwNTNhYWJmZjA0YzhlMTM5ZTFjNDg0Nzc0OWRmNDkxNGNlNTRlZTEyYjU3ZjhiNzFkNGMzYmFhYWRkYWRiOTo2MmNiZjc0NGM1NDQw HTTP/1.1 
Host: www1.loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/?tm=1&subid4=1657534276.0386540000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0

                                         
                                         75.2.73.197
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 11 Jul 2022 10:11:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: browserjs
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  data
Size:   20
Md5:    a4745abc5e7fdb89cc6df3069f3c6e69
Sha1:   74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 11 Jul 2022 10:11:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /afs/ads?adtest=off&psid=1420240428&pcsa=false&channel=000001%2C000003%2C001880%2Cbucket078&client=dp-teaminternet12_3ph&r=m&hl=no&terms=Digital%20Marketing%20Services%2CSocial%20Media%20Marketing%2CBusiness%20Lead%20Generation%2CBrand%20Management%20Platform%2CEmail%20Marketing%20Automation%20System&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2983123576258743&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17300953%2C17300956&format=r5%7Cs&nocache=7161657534279591&num=0&output=afd_ads&domain_name=www1.loneoakmarketing.com&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1657534279593&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=760&frm=0&uio=--&cont=tc&jsid=caf&jsv=457459225&rurl=http%3A%2F%2Fwww1.loneoakmarketing.com%2F%3Ftm%3D1%26subid4%3D1657534276.0386540000%26kw%3DDigital%2BMarketing%26KW1%3DDigital%2520Marketing%2520Services%26KW2%3DSocial%2520Media%2520Marketing%26KW3%3DBusiness%2520Lead%2520Generation%26KW4%3DBrand%2520Management%2520Platform%26KW5%3DEmail%2520Marketing%2520Automation%2520System%26searchbox%3D0%26domainname%3D0%26backfill%3D0&adbw=master-1%3A530 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.164
HTTP/2 200 OK
                                        
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Mon, 11 Jul 2022 10:11:18 GMT
expires: Mon, 11 Jul 2022 10:11:18 GMT
cache-control: private, max-age=3600
content-encoding: br
server: gws
content-length: 2279
x-xss-protection: 0
set-cookie: CONSENT=PENDING+561; expires=Wed, 10-Jul-2024 10:11:18 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7031)
Size:   2279
Md5:    d170cc9fe495dabc479f82eb03870cfa
Sha1:   7b238c98f384f4e788f7beb4ee82ac6ad4e18033
Sha256: 03bede8f7ab1f66fb944f82a334227d6616bb2855a00d079266a8d04c4554e77
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 11 Jul 2022 10:11:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gampad/cookie.js?domain=www1.loneoakmarketing.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie HTTP/1.1 
Host: partner.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.98
HTTP/2 200 OK
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 11 Jul 2022 10:11:18 GMT
server: cafe
cache-control: private
content-length: 189
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   189
Md5:    fc1b97d0afe16331d47e6843f43bbd9e
Sha1:   6e8a0eedf4814822f6a2738dba495177eddd0f64
Sha256: 2f657b46968452522f9926e4cd369dc4a0e44a4324b4e8df654946bafff9d948
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 11 Jul 2022 10:11:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         142.250.74.164
HTTP/2 200 OK
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 11 Jul 2022 10:11:18 GMT
expires: Mon, 11 Jul 2022 10:11:18 GMT
cache-control: private, max-age=3600
etag: "5861134743979655357"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   53397
Md5:    d1d5c477cf08f021f67c51a99bee84ff
Sha1:   db39ec52a436e68edfe01f2ce0e40f9d1e1fcafe
Sha256: 6d3a4d574066a6b94ae2cfda9d6b48eab2ee028eb041ce00ee4210fb98a74f80
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 11 Jul 2022 10:11:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 11 Jul 2022 10:11:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.1
HTTP/2 200 OK
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Mon, 11 Jul 2022 05:07:11 GMT
expires: Tue, 12 Jul 2022 04:07:11 GMT
cache-control: public, max-age=82800
age: 18247
last-modified: Thu, 22 Oct 2020 21:45:00 GMT
content-type: image/svg+xml
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   174
Md5:    4de8b85c8915995b571bde50e231be7c
Sha1:   29c226ca7b9cbe1d44e5480ce95bbb42727b2d99
Sha256: 2ec9168c4507546748c5f400f5030031f0eb06f2aed8deaa11362c395bff4f7a
                                        
                                            GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.1
HTTP/2 200 OK
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 272
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Mon, 11 Jul 2022 05:28:00 GMT
expires: Tue, 12 Jul 2022 04:28:00 GMT
cache-control: public, max-age=82800
age: 16998
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
content-type: image/svg+xml
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Size:   272
Md5:    bbbac37f0b6e29a6099e4aa7cb19d6ca
Sha1:   0acafe95e2141f0af6109203efeb2d98e6b926c6
Sha256: a3d7b37475de5a3a350d4dc4790f14a6a5f4045726d2eae4cbe9bd59aeba2fe2
                                        
                                            POST /ls.php HTTP/1.1 
Host: www1.loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 2802
Origin: http://www1.loneoakmarketing.com
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/?tm=1&subid4=1657534276.0386540000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0

                                         
                                         75.2.73.197
HTTP/1.1 201 Created
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Mon, 11 Jul 2022 10:11:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
X-Log-Success: 62cbf746018a6e4f5f3a9ac0
Charset: utf-8
Access-Control-Allow-Origin: http://www1.loneoakmarketing.com
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Max-Age: 86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_SS2EBg03XzfOYas/xufHFlpILxgpt7G5GunrlilHAaP7rum/psY4Y4l/TO7dLatEQPTrtWPBCH7juAItBPOtwA==


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 11 Jul 2022 10:11:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /track.php?domain=loneoakmarketing.com&caf=1&toggle=answercheck&answer=yes&uid=MTY1NzUzNDI3Ni44MDg6YTQwNTNhYWJmZjA0YzhlMTM5ZTFjNDg0Nzc0OWRmNDkxNGNlNTRlZTEyYjU3ZjhiNzFkNGMzYmFhYWRkYWRiOTo2MmNiZjc0NGM1NDQw HTTP/1.1 
Host: www1.loneoakmarketing.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www1.loneoakmarketing.com/?tm=1&subid4=1657534276.0386540000&kw=Digital+Marketing&KW1=Digital%20Marketing%20Services&KW2=Social%20Media%20Marketing&KW3=Business%20Lead%20Generation&KW4=Brand%20Management%20Platform&KW5=Email%20Marketing%20Automation%20System&searchbox=0&domainname=0&backfill=0
Cookie: __gsas=ID=1728fbde8ea46571:T=1657534278:S=ALNI_MZsxrk4uhgEig1UsGSNlErWXL6ZxQ

                                         
                                         75.2.73.197
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 11 Jul 2022 10:11:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: Accept-Encoding
X-Custom-Track: answercheck
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-CH-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  data
Size:   20
Md5:    a4745abc5e7fdb89cc6df3069f3c6e69
Sha1:   74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B4C8B36A82D98CD9868D19C76E337369DB5D1D24466763C90D12AB562FD1425C"
Last-Modified: Sat, 09 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9731
Expires: Mon, 11 Jul 2022 12:53:29 GMT
Date: Mon, 11 Jul 2022 10:11:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B4C8B36A82D98CD9868D19C76E337369DB5D1D24466763C90D12AB562FD1425C"
Last-Modified: Sat, 09 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9731
Expires: Mon, 11 Jul 2022 12:53:29 GMT
Date: Mon, 11 Jul 2022 10:11:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B4C8B36A82D98CD9868D19C76E337369DB5D1D24466763C90D12AB562FD1425C"
Last-Modified: Sat, 09 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9731
Expires: Mon, 11 Jul 2022 12:53:29 GMT
Date: Mon, 11 Jul 2022 10:11:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B4C8B36A82D98CD9868D19C76E337369DB5D1D24466763C90D12AB562FD1425C"
Last-Modified: Sat, 09 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9731
Expires: Mon, 11 Jul 2022 12:53:29 GMT
Date: Mon, 11 Jul 2022 10:11:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B4C8B36A82D98CD9868D19C76E337369DB5D1D24466763C90D12AB562FD1425C"
Last-Modified: Sat, 09 Jul 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9731
Expires: Mon, 11 Jul 2022 12:53:29 GMT
Date: Mon, 11 Jul 2022 10:11:18 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23d66046-e2f5-4dd5-a2a2-22fc179fcf2d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 2810
x-amzn-requestid: 211ae814-69e4-4dbe-8996-1298f8b29aa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U1RzzFONIAMFRhQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c53018-2fa34770003717d166cd8446;Sampled=0
x-amzn-remapped-date: Wed, 06 Jul 2022 06:47:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: sRCTLzPMlp4MKsb-_96E2FJaCQvcUhvjvJ7_hO7u0lXL98RSnp3vDg==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 10 Jul 2022 20:58:51 GMT
age: 47547
etag: "599cf9d1698e8eb797893838efc51d97392ca88e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2810
Md5:    dcae1c951d9cfda41f33bf9a3dbaa825
Sha1:   599cf9d1698e8eb797893838efc51d97392ca88e
Sha256: 332badd1252fa39797153e5accf2efa7486d84ee7ea247c379e4373f3fddc262
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dea278f-57aa-42f2-97c1-f7fbee932e3a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 4376
x-amzn-requestid: d5cbb417-a9a8-4a09-b493-a510af2edf00
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U4iaLH0LIAMF1lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c67dda-2b4218fc53151bcf5ec254b5;Sampled=0
x-amzn-remapped-date: Thu, 07 Jul 2022 06:31:54 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: H9Q7BfHHOwOdGXwu84WgrKc1U_KmEYqyAnaBWYTxtgu-vWiTxxJQUg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sun, 10 Jul 2022 22:01:39 GMT
age: 43779
etag: "0d18c7d6298fc3f814046a429abef4ce4e484a89"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4376
Md5:    fd3e839e3bec829ae65c4f2d6ac58cb1
Sha1:   0d18c7d6298fc3f814046a429abef4ce4e484a89
Sha256: 49a30a439a58ad5da03aaa4709fcaeb14d2e05b5f189431a04c060243d248080
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fef2448c0-3f08-480f-ba81-649121b6b595.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7672
x-amzn-requestid: dab239d3-3985-43f5-861f-de6534a51fb0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U-rV9EXcoAMFmaw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c8f28c-140831951f1d83e60cb297cd;Sampled=0
x-amzn-remapped-date: Sat, 09 Jul 2022 03:14:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2YFuIrq0yZR5wv5vGzV1x8-QFh5WSm90gswuC9ECubTD1Dc1VPgP6A==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 11 Jul 2022 02:47:30 GMT
age: 26628
etag: "3ed213cf4eb4034f98eab05e83986c904d155b16"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7672
Md5:    012b722e1c6d4e124c65487e993326b6
Sha1:   3ed213cf4eb4034f98eab05e83986c904d155b16
Sha256: 1d657f8bf1d2e8879e27bda7f8865522175d6f4f8b8bd9126e03a2ccf6b5f0ea
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e26ff48-a357-45ff-8acd-ab171868fd5b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 4444
x-amzn-requestid: 0f6c1b7c-3f77-4986-b207-6d728f4f32e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: U7YXSGUvoAMFbDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62c7a0fb-7e565afb4c1b9273149e78fe;Sampled=0
x-amzn-remapped-date: Fri, 08 Jul 2022 03:14:03 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qhwPbtMeY2X6CiW2wea80ua8DK3jntpKUyxdUhIuHSdYoICpqhY4wA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 11 Jul 2022 05:16:44 GMT
age: 17674
etag: "ae3dde494564f92d018b54dd3fbef057e30f8bd6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4444
Md5:    26c31254e55bae731678745ebfbf6274
Sha1:   ae3dde494564f92d018b54dd3fbef057e30f8bd6
Sha256: 486b7e3295dfa09a0109e556aa9e70e5fe9c0c14a93f047d14effe60baaa1e88
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e7449b4-ce90-4a4a-8c47-65a593fa2896.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7835
x-amzn-requestid: 504403b7-b9cc-4d9a-8474-eea3ca7dbe95
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: VEfdIEHKoAMF_mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62cb45ed-3e36147b0a99d13d3ce80012;Sampled=0
x-amzn-remapped-date: Sun, 10 Jul 2022 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: iUrWrOshn45wfW04L7RHQHDBP7OQg-KqFbxTQqFRACl2ztkBjtY6vA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 10 Jul 2022 22:10:24 GMT
age: 43254
etag: "dca56d8ee52ffd9abdb93af0570e020f07442950"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7835
Md5:    2e97802e08b1962afd2a7ddd3daaf918
Sha1:   dca56d8ee52ffd9abdb93af0570e020f07442950
Sha256: e2e8cede5eff80b6fd764b846525a87a19b110673f861d1616fd001c8870f968
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F152c4817-bcd1-45b0-a9a6-4213f5f2e016.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8527
x-amzn-requestid: 2b4741e3-5a0e-448b-ad1f-a108868060cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: VEfdIEumIAMFXhQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62cb45ed-1b295580508b1f5268e8696a;Sampled=0
x-amzn-remapped-date: Sun, 10 Jul 2022 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: UZa4OnKL2QvKAfacLXN5ppJT8OTtl4n1Cm8rZme_KNFS8V6Nj6X3PA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 10 Jul 2022 22:10:24 GMT
age: 43254
etag: "35821ce26a19818c8a49bf1030ac114a4fd47a5b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8527
Md5:    5d70d690e96b168c42bbd145934463bf
Sha1:   35821ce26a19818c8a49bf1030ac114a4fd47a5b
Sha256: db9df4342fc461bfd0a701513b073691dec402fbb4adfcfc7da813817c5f8236