POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
 23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3404
Expires: Thu, 23 Mar 2023 07:36:33 GMT
Date: Thu, 23 Mar 2023 06:39:49 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "59553A312D3FB34F1F0AEA469F7E7CC810FF9993481DDBD73EA5D461CF97ED51"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3359
Expires: Thu, 23 Mar 2023 07:35:48 GMT
Date: Thu, 23 Mar 2023 06:39:49 GMT
Connection: keep-alive
|
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
 35.241.9.150
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 06:15:05 GMT
age: 1484
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6204
Expires: Thu, 23 Mar 2023 08:23:13 GMT
Date: Thu, 23 Mar 2023 06:39:49 GMT
Connection: keep-alive
|
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
x-amz-id-2: jlwvhoYo349onN2/BxIEMJhcTqG+cdZRExLqzPtjEXgiVdtGSsmz48tULxx1HJM6IOaWmWlYK+Q=
x-amz-request-id: HJ5TEDK5392HM45R
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 05:59:49 GMT
age: 2400
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
GET / HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
|
 199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/html
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Mon, 06 Mar 2023 09:22:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6405b0db-2dbd"
Content-Encoding: gzip
|
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.117.237.239
HTTP/2 200 OK
content-type: application/json
server: nginx
date: Thu, 23 Mar 2023 06:39:49 GMT
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /index/patch.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Content-Length: 103
Last-Modified: Wed, 19 Oct 2022 11:08:32 GMT
Connection: keep-alive
ETag: "634fdab0-67"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
GET /index/autop2022.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Wed, 19 Oct 2022 11:17:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634fdcce-10597"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /index/floating_bnr.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Wed, 19 Oct 2022 11:08:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634fdab0-1066"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /2.js HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: application/javascript
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Fri, 03 Mar 2023 10:02:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6401c5a0-1322"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/common.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef2-532"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/web_font.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef2-60b"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/common_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef2-2839"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/header_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Mon, 06 Mar 2023 03:42:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"6405611a-4523"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/footer_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef2-18b9"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/parts.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Content-Length: 460
Last-Modified: Wed, 19 Oct 2022 08:01:54 GMT
Connection: keep-alive
ETag: "634faef2-1cc"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
GET /statica/parts_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef2-e056"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
35.241.9.150
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 06:17:23 GMT
age: 1346
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /index/clientlib-base.min.d9d23f388ff7b590ff7ec23366ca0e99.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:49 GMT
Last-Modified: Wed, 19 Oct 2022 11:08:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634fdab0-de4ea"
Expires: Thu, 23 Mar 2023 18:39:49 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/header_branding_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 846
Last-Modified: Wed, 19 Oct 2022 08:01:54 GMT
Connection: keep-alive
ETag: "634faef2-34e"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
GET /statica/header_banner_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef2-75b"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/dynavi_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef2-6f5"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/KDDIto_faq_api_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 146
Connection: keep-alive
|
GET /statica/chat_tool_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef4-27ad"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/add_modules_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef4-11fd"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5740
Expires: Thu, 23 Mar 2023 08:15:30 GMT
Date: Thu, 23 Mar 2023 06:39:50 GMT
Connection: keep-alive
|
GET /statica/osp_parts_ex_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef4-1166"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/parts_smt-v2-btn.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 592
Last-Modified: Wed, 19 Oct 2022 08:01:56 GMT
Connection: keep-alive
ETag: "634faef4-250"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
GET /statica/new_footer_user_assessment_log.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef4-236d"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/font.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 224
Last-Modified: Wed, 19 Oct 2022 08:01:56 GMT
Connection: keep-alive
ETag: "634faef4-e0"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
GET /statica/slick.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef4-135c"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/index_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:01:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faef6-1025"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/style.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Mon, 06 Mar 2023 04:09:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"64056790-f213"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/l3-base.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:03:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faf6c-a093"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/parts_smt-v2.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Mon, 06 Mar 2023 04:07:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"640566f2-6bf0e"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/rf2-style.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:03:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faf6e-91d6"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/header_dpoint_area.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:02:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faefe-2472"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /index/common1.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 734
Last-Modified: Mon, 06 Mar 2023 07:43:54 GMT
Connection: keep-alive
ETag: "640599ba-2de"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
GET /1.js HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: application/javascript
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Sat, 11 Mar 2023 10:02:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"640c51ae-1322"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET /statica/l3.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Last-Modified: Wed, 19 Oct 2022 08:03:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"634faf6c-9bab0"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
|
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QwU78yNjlxB63LRzDLnFtQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
|
44.226.72.95
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TLjgHrrD1hIvym0hzuUvf/UObPc=
|
GET /statica/KDDIto_faq_api_smt.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
Cookie: __tins__21567219=%7B%22sid%22%3A%201679553597780%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397780%7D; __51cke__=; __51laig__=2; __tins__21562311=%7B%22sid%22%3A%201679553597786%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397786%7D
|
199.167.138.75
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 146
Connection: keep-alive
|
GET /index/5.png HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 8029
Last-Modified: Mon, 06 Mar 2023 08:31:12 GMT
Connection: keep-alive
ETag: "6405a4d0-1f5d"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /index/4.png HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 14757
Last-Modified: Sat, 04 Mar 2023 09:07:26 GMT
Connection: keep-alive
ETag: "64030a4e-39a5"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /statica/4.jpg HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/jpeg
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 108146
Last-Modified: Mon, 31 Oct 2022 09:25:12 GMT
Connection: keep-alive
ETag: "635f9478-1a672"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
--- Additional Info ---
Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, height=2316, software=www.meitu.com, width=1080], baseline, precision 8, 564x1333, components 3\012- data
Size: 108146
Md5: c7103846b240db4c449ca632246fc3de
Sha1: c4653a081ded64797cb3c53bd3449e171571fa50
Sha256: 3c77e423b78ac676aa2de3bfe1e51813fcfaea7975a3a206e82f25b98c61c305
urlquery:
- Suspicious - DynDNS domain
IDS:
- ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
|
GET /statica/2.jpg HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/jpeg
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 157972
Last-Modified: Mon, 06 Mar 2023 09:11:02 GMT
Connection: keep-alive
ETag: "6405ae26-26914"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /index/3.png HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 44107
Last-Modified: Mon, 06 Mar 2023 08:28:57 GMT
Connection: keep-alive
ETag: "6405a449-ac4b"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /images_osp/common/spacer.gif HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/statica/common.css
Cookie: __tins__21567219=%7B%22sid%22%3A%201679553597780%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397780%7D; __51cke__=; __51laig__=2; __tins__21562311=%7B%22sid%22%3A%201679553597786%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397786%7D
|
199.167.138.75
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 146
Connection: keep-alive
|
GET /images_osp/common/ico/ico_conversion_olt.png HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/statica/parts_smt-v2.css
Cookie: __tins__21567219=%7B%22sid%22%3A%201679553597780%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397780%7D; __51cke__=; __51laig__=2; __tins__21562311=%7B%22sid%22%3A%201679553597786%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397786%7D
|
199.167.138.75
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 146
Connection: keep-alive
|
GET /statica/print.css HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
Cookie: __tins__21567219=%7B%22sid%22%3A%201679553597780%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397780%7D; __51cke__=; __51laig__=2; __tins__21562311=%7B%22sid%22%3A%201679553597786%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397786%7D
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: text/css
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 50
Last-Modified: Wed, 19 Oct 2022 08:01:56 GMT
Connection: keep-alive
ETag: "634faef4-32"
Expires: Thu, 23 Mar 2023 18:39:50 GMT
Cache-Control: max-age=43200
Accept-Ranges: bytes
|
GET /images_osp/common/ico/ico_window03_v2.png HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/statica/parts_smt-v2.css
Cookie: __tins__21567219=%7B%22sid%22%3A%201679553597780%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397780%7D; __51cke__=; __51laig__=2; __tins__21562311=%7B%22sid%22%3A%201679553597786%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397786%7D
|
199.167.138.75
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 146
Connection: keep-alive
|
GET /statica/6.jpg HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/jpeg
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 121592
Last-Modified: Mon, 06 Mar 2023 09:11:31 GMT
Connection: keep-alive
ETag: "6405ae43-1daf8"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /index/1.png HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
Cookie: __tins__21567219=%7B%22sid%22%3A%201679553597780%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397780%7D; __51cke__=; __51laig__=2; __tins__21562311=%7B%22sid%22%3A%201679553597786%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397786%7D
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 179864
Last-Modified: Mon, 06 Mar 2023 07:42:22 GMT
Connection: keep-alive
ETag: "6405995e-2be98"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /statica/logo.png HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 6850
Last-Modified: Mon, 06 Mar 2023 04:19:00 GMT
Connection: keep-alive
ETag: "640569b4-1ac2"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /statica/logo2.png HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 51082
Last-Modified: Sat, 04 Mar 2023 09:14:30 GMT
Connection: keep-alive
ETag: "64030bf6-c78a"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /statica/1.jpg HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/jpeg
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 118591
Last-Modified: Mon, 06 Mar 2023 09:11:04 GMT
Connection: keep-alive
ETag: "6405ae28-1cf3f"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /statica/5.jpg HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/jpeg
Server: nginx
Date: Thu, 23 Mar 2023 06:39:51 GMT
Content-Length: 138352
Last-Modified: Mon, 06 Mar 2023 09:13:08 GMT
Connection: keep-alive
ETag: "6405aea4-21c70"
Expires: Sat, 22 Apr 2023 06:39:51 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /statica/7.jpg HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/jpeg
Server: nginx
Date: Thu, 23 Mar 2023 06:39:51 GMT
Content-Length: 123911
Last-Modified: Mon, 06 Mar 2023 09:14:30 GMT
Connection: keep-alive
ETag: "6405aef6-1e407"
Expires: Sat, 22 Apr 2023 06:39:51 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /images_osp/common/ico/ico_conversion_contract_cnf.png HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/statica/parts_smt-v2.css
Cookie: __tins__21567219=%7B%22sid%22%3A%201679553597780%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397780%7D; __51cke__=; __51laig__=2; __tins__21562311=%7B%22sid%22%3A%201679553597786%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397786%7D
|
199.167.138.75
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: nginx
Date: Thu, 23 Mar 2023 06:39:51 GMT
Content-Length: 146
Connection: keep-alive
|
GET /statica/3.jpg HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/jpeg
Server: nginx
Date: Thu, 23 Mar 2023 06:39:51 GMT
Content-Length: 188531
Last-Modified: Mon, 31 Oct 2022 09:25:10 GMT
Connection: keep-alive
ETag: "635f9476-2e073"
Expires: Sat, 22 Apr 2023 06:39:51 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
--- Additional Info ---
Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, height=2316, software=www.meitu.com, width=1080], baseline, precision 8, 1067x2117, components 3\012- data
Size: 188531
Md5: f1ebd37f4327ecafb79d418b055f059f
Sha1: ae48973ef810b2e3624abb92b69807898017d593
Sha256: 3ed0fd3a419ef64bf46f9a2243664d4e6996ea656ecf00859444b7504afb5651
urlquery:
- Suspicious - DynDNS domain
IDS:
- ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain
|
GET /index/2.png HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
|
199.167.138.75
HTTP/1.1 200 OK
Content-Type: image/png
Server: nginx
Date: Thu, 23 Mar 2023 06:39:50 GMT
Content-Length: 113029
Last-Modified: Mon, 06 Mar 2023 08:11:03 GMT
Connection: keep-alive
ETag: "6405a017-1b985"
Expires: Sat, 22 Apr 2023 06:39:50 GMT
Cache-Control: max-age=2592000
Accept-Ranges: bytes
|
GET /favicon.ico HTTP/1.1
Host: vfpupxodie.duckdns.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vfpupxodie.duckdns.org/
Cookie: __tins__21567219=%7B%22sid%22%3A%201679553597780%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397780%7D; __51cke__=; __51laig__=2; __tins__21562311=%7B%22sid%22%3A%201679553597786%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201679555397786%7D
|
199.167.138.75
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: nginx
Date: Thu, 23 Mar 2023 06:39:51 GMT
Content-Length: 146
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6871
Expires: Thu, 23 Mar 2023 08:34:22 GMT
Date: Thu, 23 Mar 2023 06:39:51 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6871
Expires: Thu, 23 Mar 2023 08:34:22 GMT
Date: Thu, 23 Mar 2023 06:39:51 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6871
Expires: Thu, 23 Mar 2023 08:34:22 GMT
Date: Thu, 23 Mar 2023 06:39:51 GMT
Connection: keep-alive
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F26aea22c-e627-45d1-bce6-55eaa4acfd06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 10816
x-amzn-requestid: 60a537d2-1b8a-4ae2-967c-a7e57c818cc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xY0EHqoAMFrrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6415629e-1be08f9f3a13492717fdaa48;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:05:02 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: vDHHtzyodFMqzVuaPCmaEfKrHTLjTL8d25c9PJjPXAdyN-SYJC1NGA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 22:58:21 GMT
age: 27690
etag: "ee683e481a4501d2ab8ca63d1426d6fab6f2b064"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ncagzm12kJaHQtYhhjUUhcfXVfbwMdonoNYqpK-QXEmLfyyENgFnFA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 02:49:25 GMT
age: 13826
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 4912
x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3Fl1IAMFYgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 4xGMCVWy2EXLLN8keteGLQvQjOp6KH97rkn_FK10eyng0-5EudcOig==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 174acb08636ac7d9e9a778bbf1bcbc52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:33 GMT
etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e"
age: 32178
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261caab9-983c-4eb1-9fca-fd73dc738e9e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 10284
x-amzn-requestid: 646b9c7c-8874-46c4-b46b-acead73e2320
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFcVGu7IAMFsQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b5e8-59436f1f66e52618400b47ff;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:12:40 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: qYJy52mX-LR-k_ReZsbSoJZP7ZZzTPykWjX4OKtzJcIzJNBmzLEClw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 07:29:06 GMT
age: 83445
etag: "5035ed41f497c97faefae9cdaf42dc07ab468557"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d837d4e-ce18-46d7-b240-75b9b4a896bd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 12642
x-amzn-requestid: 4bd678ba-79b1-4dc1-a58a-a7fe6e2e933b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFV8EQfoAMFs5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b5bf-3a673c87370eede03c329782;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:11:59 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 7DW11CRYwJcnBjhBMu9dn7asNdVaQyWZ0D_xWiEHXHiuzdmLgq97wg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a9e73292d0b92053c3e38dcec15fd0e2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 12:41:07 GMT
age: 64724
etag: "fc3a53367d844a13ec4b9742fd86954e8c187245"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F772d9c75-9796-494f-9fc4-91d04e2bac53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 4905
x-amzn-requestid: bdcd62f9-d742-48af-9aa0-b13afc1846ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM9EnFLIoAMF5cg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b7550-63fc3df77b023fca782a53ea;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:38:24 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: we0zl0U_rfWuSW8_WX8vqLOYOCoeGP-4UUNb0r3f0mEICnLXASqC5A==
via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 03:39:03 GMT
age: 10848
etag: "4f25bdbffca3803b02c196c38491223684d36b4d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|