Overview

URLhaidut.dyndns.org/
IP 172.104.14.178 (United States)
ASN#63949 Linode, LLC
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-08 10:37:02 UTC
StatusLoading report..
IDS alerts8
Blocklist alert0
urlquery alerts
2
Suspicious - DynDNS domain
Tags dyndns

Domain Summary (12)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
fonts.gstatic.com (3) 0 2014-04-02 10:51:04 UTC 2023-02-07 07:09:03 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-07 04:09:37 UTC 35.241.9.150
haidut.dyndns.org (1) 0 2017-03-21 13:56:00 UTC 2023-02-07 10:16:55 UTC 172.104.14.178 Unknown ranking
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-07 04:10:04 UTC 34.160.144.191
fonts.googleapis.com (1) 8877 2012-05-23 12:41:44 UTC 2023-02-07 11:23:00 UTC 142.250.74.106
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-07 04:09:08 UTC 54.200.117.177
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-02-07 13:17:44 UTC 34.120.237.76
www.w3counter.com (1) 176316 2012-05-22 19:50:39 UTC 2023-02-08 06:32:44 UTC 104.26.7.93
r3.o.lencr.org (8) 344 2020-12-02 08:52:13 UTC 2023-02-07 04:09:08 UTC 23.33.119.10
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-07 04:14:22 UTC 34.117.237.239
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2023-02-07 13:24:55 UTC 93.184.220.29
haidut.me (21) 0 2019-04-14 22:33:51 UTC 2023-02-04 10:03:11 UTC 172.104.14.178 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-02-08 10:37:45 UTC 2 Client IP Internal IP ET INFO DYNAMIC_DNS Query to a *.dyndns .org Domain 
2023-02-08 10:37:45 UTC 3 Client IP Internal IP ET INFO DYNAMIC_DNS Query to *.dyndns. Domain 
2023-02-08 10:37:45 UTC 2 Client IP Internal IP ET INFO DYNAMIC_DNS Query to a *.dyndns .org Domain 
2023-02-08 10:37:45 UTC 3 Client IP Internal IP ET INFO DYNAMIC_DNS Query to *.dyndns. Domain 
2023-02-08 10:37:45 UTC 2 Client IP  172.104.14.178 ET INFO DYNAMIC_DNS HTTP Request to a *.dyndns .org Domain 
2023-02-08 10:37:45 UTC 3 Client IP  172.104.14.178 ET INFO DYNAMIC_DNS HTTP Request to a *.dyndns.* domain 
2023-02-08 10:37:47 UTC 2 Client IP  172.104.14.178 ET INFO DYNAMIC_DNS HTTP Request to a *.dyndns .org Domain 
2023-02-08 10:37:47 UTC 3 Client IP  172.104.14.178 ET INFO DYNAMIC_DNS HTTP Request to a *.dyndns.* domain 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.104.14.178
Date UQ / IDS / BL URL IP
2023-03-12 09:53:38 +0000 2 - 8 - 0 haidut.dyndns.org/ 172.104.14.178
2023-02-09 10:26:49 +0000 3 - 8 - 0 haidut.dyndns.org/ 172.104.14.178
2023-02-08 10:37:02 +0000 2 - 8 - 0 haidut.dyndns.org/ 172.104.14.178
2023-02-04 10:03:10 +0000 3 - 8 - 0 haidut.dyndns.org/ 172.104.14.178
2023-01-26 11:16:36 +0000 3 - 8 - 0 haidut.dyndns.org/ 172.104.14.178


Last 5 reports on ASN: Linode, LLC
Date UQ / IDS / BL URL IP
2023-03-31 19:44:26 +0000 0 - 0 - 3 172.104.188.231/ 172.104.188.231
2023-03-31 19:34:25 +0000 0 - 0 - 1 back.blatnet.com/mtm/direct/.eJxtiksOwjAMBe_i (...) 45.33.30.197
2023-03-31 19:05:17 +0000 0 - 1 - 0 secure.10-pn-installer.com/o/dynamic_ptn/setu (...) 45.33.2.79
2023-03-31 18:59:29 +0000 0 - 0 - 1 www.calltree.net/ 173.255.194.134
2023-03-31 18:53:23 +0000 0 - 0 - 1 spcreative.com/mtm/direct/.eJxlikEKAjEMRe-S5V (...) 72.14.185.43


Last 5 reports on domain: haidut.dyndns.org
Date UQ / IDS / BL URL IP
2023-03-12 09:53:38 +0000 2 - 8 - 0 haidut.dyndns.org/ 172.104.14.178
2023-02-09 10:26:49 +0000 3 - 8 - 0 haidut.dyndns.org/ 172.104.14.178
2023-02-08 10:37:02 +0000 2 - 8 - 0 haidut.dyndns.org/ 172.104.14.178
2023-02-04 10:03:10 +0000 3 - 8 - 0 haidut.dyndns.org/ 172.104.14.178
2023-01-26 11:16:36 +0000 3 - 8 - 0 haidut.dyndns.org/ 172.104.14.178


Last 2 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-09 10:26:49 +0000 3 - 8 - 0 haidut.dyndns.org/ 172.104.14.178
2023-01-26 11:16:36 +0000 3 - 8 - 0 haidut.dyndns.org/ 172.104.14.178

JavaScript

Executed Scripts (15)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (47)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.10
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9020
Expires: Wed, 08 Feb 2023 13:07:11 GMT
Date: Wed, 08 Feb 2023 10:36:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.10
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3034
Expires: Wed, 08 Feb 2023 11:27:25 GMT
Date: Wed, 08 Feb 2023 10:36:51 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.10
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17001
Expires: Wed, 08 Feb 2023 15:20:12 GMT
Date: Wed, 08 Feb 2023 10:36:51 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 08 Feb 2023 10:34:13 GMT
age: 158
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    ff250d3ef3fa45322bf05039a0122a9f
Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d
Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
                                        
                                            GET / HTTP/1.1 
Host: haidut.dyndns.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 08 Feb 2023 10:36:51 GMT
Server: Apache/2.4.29 (Ubuntu)
Link: <http://haidut.me/index.php?rest_route=/>; rel="https://api.w.org/"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9873
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9381), with CRLF, LF line terminators
Size:   9873
Md5:    06adcd5c911b462e1dc45b84df86dd54
Sha1:   9320b0d581cb1e965768f7349dbce03e73ab1da9
Sha256: cd9871ad2ae67c825f1c86c81215a1ab98717fbb6b472266fa258dd7b6d210bc

Alerts:
  urlquery:
    - Suspicious - DynDNS domain
  IDS:
    - ET INFO DYNAMIC_DNS HTTP Request to a *.dyndns .org Domain
    - ET INFO DYNAMIC_DNS HTTP Request to a *.dyndns.* domain
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: YKWGC+sVa1o+o0Dd2h0APQX0cToxOXAx1AMK3osjd39w962v2os4UUtyd0dVV3yTddGjgf7gSfw=
x-amz-request-id: TMTQ9R7Y3RZHQ1FX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 08 Feb 2023 09:45:55 GMT
age: 3057
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e76071a28ee566dababb3834f46d68ed
Sha1:   aebb4e68c1ba2de0f90025283e8ed8470944fde0
Sha256: 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 08 Feb 2023 10:36:52 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /css?family=Oswald:400,500,700|Pridi:400,500,700|Merriweather:400,400i,700,700i&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 08 Feb 2023 10:36:52 GMT
Date: Wed, 08 Feb 2023 10:36:52 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   1014
Md5:    f1060ece1c52f1832e6602ae829c85b3
Sha1:   de549c12fc5083c6f95a478121e9273de1e68840
Sha256: 617fc7e7b231469b783665ecc0ee35f6fb5f678a2acf287c81bb915b37f45b83
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1138
Cache-Control: max-age=170361
Date: Wed, 08 Feb 2023 10:36:52 GMT
Etag: "63e36d4b-118"
Expires: Fri, 10 Feb 2023 09:56:13 GMT
Last-Modified: Wed, 08 Feb 2023 09:37:15 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Wed, 16 Nov 2022 05:44:15 GMT
ETag: "172a9-5ed8ff67ea4b6-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 12518
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (47826)
Size:   12518
Md5:    8fa87dd23394a22621248ec378d2af59
Sha1:   9305bc637a89b1700d7f56a19a80bd32b0feb2f7
Sha256: c162f7de24fa2d4e93e0da254ef287ff72f4a3e03f42443265097968351388dc
                                        
                                            GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 06 Nov 2022 16:35:47 GMT
ETag: "d9-5eccfe631d468-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 189
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   189
Md5:    5a18e16eb01cbaa862eb32e6b77bedb2
Sha1:   3abf9b913cc9f558f02cba7c9b822f8d1812cb96
Sha256: d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
                                        
                                            GET /wp-content/plugins/wp-to-twitter/css/twitter-feed.css?ver=6.1.1 HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Mon, 19 Sep 2022 16:04:07 GMT
ETag: "6ce-5e909dc8bbf81-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 535
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   535
Md5:    838ab4d900e5632d9e6afcaaa76ebc6a
Sha1:   35cad5f92aa5775f4c167cf59fbffcfada6d47d0
Sha256: 6a3d067af3be2d98832541ffe6b58f4e19b3f68d56c798d770e19d1e99927626
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 21 Mar 2021 15:23:18 GMT
ETag: "2bd8-5be0d875b58bc-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4169
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4169
Md5:    5629711d7fdd5b28441bac39b851299f
Sha1:   4e0bf2b7383097f7c352023a1b1b1b48a50356b6
Sha256: 44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
                                        
                                            GET /wp-content/themes/gridmode/assets/js/jquery.fitvids.min.js HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "6f5-5e73174d9eff1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 798
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (1781), with no line terminators
Size:   798
Md5:    38470df29780283e8f3a23e637d7826e
Sha1:   42c11cc079fef4c372a8848bdd2a451a5062cd88
Sha256: 62214bc5c931b8b8afd351b9be96aac7234511dc1853f63f3021ebf2bed649e8
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Tue, 31 May 2022 00:44:04 GMT
ETag: "48b9-5e04411d2c18b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5009
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (15660)
Size:   5009
Md5:    e6624e0b978e6ddba476be41aaaa82df
Sha1:   822e920d8233072110ed7c8a7f379e5b13209b18
Sha256: dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 06 Nov 2022 16:35:48 GMT
ETag: "15e54-5eccfe63389e9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30995
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65447)
Size:   30995
Md5:    1b5264c989379b828aff60f65a518a24
Sha1:   98641237f14ccb33ac114f54329a33bd0aa17eb7
Sha256: 6c8e7b78c6dbc13426810c905572db7589cf3e00264e30ce797fddb0b1092237
                                        
                                            GET /wp-content/themes/gridmode/style.css HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "1fc85-5e73174d9e051-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17381
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1617), with CRLF line terminators
Size:   17381
Md5:    b94628bc46d73ce1500d1c63bee2376f
Sha1:   4922e8eac4edaa885ae1062a6eba5c7c6be025fd
Sha256: 3990899c7b3bd12ca22b0cf08c6a2ce0d9e5f0ef79e2f731e221fee8ad84ad41
                                        
                                            GET /wp-content/themes/gridmode/assets/css/all.min.css HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "189ae-5e73174d9eff1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20562
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65317)
Size:   20562
Md5:    8a9b43be146b82c7ae7ac9c40662cce1
Sha1:   721cfa45ad910781e90af3f6c4068a8a4ba1884f
Sha256: 696a8b9b6b7b66cc91213b9d780077c186e541b55d13d3f8c9edc0c554a36aad
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 08 Feb 2023 10:14:52 GMT
age: 1320
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /wp-content/themes/gridmode/assets/js/navigation.js HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "35b2-5e73174d9eff1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1759
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1759
Md5:    dbac1c7dbcdb9045776c6b62db8c4c7f
Sha1:   3d650a2ae8e3114c5804ac8151d061c4186cf051
Sha256: 4576953faebe68af6482d81329943b0a3f94a53541c2fe423f82fe4603b5c2b2
                                        
                                            GET /wp-content/themes/gridmode/assets/js/skip-link-focus-fix.js HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "342-5e73174d9eff1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 427
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   427
Md5:    e5b8fb1b2c423f7561d40e3f6c1238c1
Sha1:   e102709f99b5740db74d41ee56e1ca89e7a112fa
Sha256: ba57611d547344d7f83f81cd96b4cbb3306943384a6f61fefa52aa20e1c9a496
                                        
                                            GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sun, 21 Mar 2021 15:23:18 GMT
ETag: "15fd-5be0d875bd5bc-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1834
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (5477)
Size:   1834
Md5:    951ae46ca55ec7b0e401e2074bdf8b54
Sha1:   64bbbdc28a351b26cab9c230e134ca8eb4d4f83e
Sha256: fd5d4c623e9d68551114b2a1303584b6792e592e864d4416145904fe8b9edd91
                                        
                                            GET /wp-content/themes/gridmode/assets/js/custom.js HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "1d7e-5e73174d9ff91-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1572
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1572
Md5:    902dfceab514588176c8fb4bdacd903b
Sha1:   530d94c2e5c802f54845866455881d58e1aeba80
Sha256: 239c807a3758975a9001c48a692620fc92c6c0e5e91cd1a24f25df683d987ecc
                                        
                                            GET /wp-content/themes/gridmode/assets/js/html5shiv.js HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "27cd-5e73174d9eff1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3049
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   3049
Md5:    78721fa1073e1a183ac142fc54bb100c
Sha1:   2313d7766dce1967c32b0d5e542f5456cc835f29
Sha256: a036b4ebf38b792e6f52d19388bb1d484fe67929846db17724c5813c1521ee67
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=6.1.1 HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Tue, 31 May 2022 00:44:04 GMT
ETag: "5f6-5e04411d3000a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 798
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1491)
Size:   798
Md5:    8322c00ce7425acef42ce7c64547181b
Sha1:   2b9f1919a467a4fc85eda03a2dfe3685b5b8f386
Sha256: 6730d2e1158902156d8833f20d8903239859950c66f43ba0e16e287a96ac103a
                                        
                                            GET /wp-content/themes/gridmode/assets/images/no-image-360-270.jpg HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "4ef-5e73174d9ff91"
Accept-Ranges: bytes
Content-Length: 1263
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, software=ACD Systems Digital Imaging, datetime=2021:08:21 09:02:21], baseline, precision 8, 360x270, components 3\012- data
Size:   1263
Md5:    da789e20914adb50571027cc58b2183a
Sha1:   8645dcd4876621d9a52e1589163d5d8a013c0570
Sha256: 2453313bc7d895a86029eaf91e3b2ce3048a957aa4cfc86b3a22eb0150df7a7b
                                        
                                            GET /s/pridi/v11/2sDQZG5JnZLfkcWdqWg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://haidut.dyndns.org
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20772
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 03 Feb 2023 12:06:57 GMT
Expires: Sat, 03 Feb 2024 12:06:57 GMT
Cache-Control: public, max-age=31536000
Age: 426595
Last-Modified: Wed, 27 Apr 2022 16:32:08 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 20772, version 1.0\012- data
Size:   20772
Md5:    2021c9100e95227336b4ed879a04bac6
Sha1:   6d8232accf5d9f3023dffedccf99b675a2969406
Sha256: d2c29630e6525fe28e33ef53f3b1f77aebfdf8b62dcbdb085222a008ec67e099
                                        
                                            GET /s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://haidut.dyndns.org
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 17908
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 04:40:28 GMT
Expires: Wed, 07 Feb 2024 04:40:28 GMT
Cache-Control: public, max-age=31536000
Age: 107784
Last-Modified: Mon, 18 Jul 2022 19:23:34 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 17908, version 1.0\012- data
Size:   17908
Md5:    e46b4e2e3b47cc232937ebf72b4c537e
Sha1:   2675bc06ee643b8c935370325a327efb74746e6a
Sha256: d8543b5dcaea1fc4a0301dc12b5b2adc9079e0794dd6a45879588fb844f3438e
                                        
                                            GET /s/merriweather/v30/u-4n0qyriQwlOrhSvowK_l52xwNZWMf6.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://haidut.dyndns.org
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 19740
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 06 Feb 2023 07:04:26 GMT
Expires: Tue, 06 Feb 2024 07:04:26 GMT
Cache-Control: public, max-age=31536000
Age: 185546
Last-Modified: Tue, 26 Apr 2022 15:48:38 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 19740, version 1.0\012- data
Size:   19740
Md5:    101cf2a65d64322878605fa8472bb025
Sha1:   6dffc15e38c321e4bb567b4bd8107a2e8d97c61d
Sha256: 273c8613cdd2852dd5318f224d804ae6d2fc717c48d3f1dab587b6d396fb4fc8
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.10
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6797
Expires: Wed, 08 Feb 2023 12:30:09 GMT
Date: Wed, 08 Feb 2023 10:36:52 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/themes/gridmode/assets/images/background.png HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://haidut.dyndns.org/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "ac9f-5e73174d9ff91"
Accept-Ranges: bytes
Content-Length: 44191
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Size:   44191
Md5:    c93975e3e5fc5c6bd4d2e789ff31ae4a
Sha1:   e8eef3b41201c08838c2affd352c63294cf3337b
Sha256: fee9c6f41d975948ec2212d1f0123a6b6c3a3de1021690108a8d09b2f99de3a4
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wghqy8zA8b/7Y8IllZql1A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.200.117.177
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nN/ePLSoV0LtD99/74PTiI+FO2Y=

                                        
                                            GET /wp-content/themes/gridmode/assets/webfonts/fa-solid-900.ttf HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://haidut.dyndns.org
Connection: keep-alive
Referer: http://haidut.me/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/font-sfnt
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "5ed6c-5e73174d9eff1"
Accept-Ranges: bytes
Content-Length: 388460
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  TrueType Font data, 10 tables, 1st "OS/2"\012- data
Size:   14457
Md5:    c41370fdba09a135de03968c78e6ae2b
Sha1:   92b075a7eea914f35473e5684cefbf6810bc8037
Sha256: f04785a4ac7884d9e8e2168ed407290962dbe70a1413d1206c14912a6cfce34d
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.10
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8263
Expires: Wed, 08 Feb 2023 12:54:37 GMT
Date: Wed, 08 Feb 2023 10:36:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.10
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8263
Expires: Wed, 08 Feb 2023 12:54:37 GMT
Date: Wed, 08 Feb 2023 10:36:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.10
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8263
Expires: Wed, 08 Feb 2023 12:54:37 GMT
Date: Wed, 08 Feb 2023 10:36:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.10
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8263
Expires: Wed, 08 Feb 2023 12:54:37 GMT
Date: Wed, 08 Feb 2023 10:36:54 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5abcabc9-1cda-4d86-8630-67943159604b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6679
x-amzn-requestid: 97c19ad5-c127-4dc1-b529-1eca84645316
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f59MzHgloAMFwow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0a8b8-79d6b8d31b69153d4929b7b7;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 07:14:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: x_tr-xummuF51PvAM4y3DgvLWuJOwxgquKO8baQfcoN6ta5M3ll7ug==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 06:24:59 GMT
age: 15115
etag: "a8a1780c88e8ae219048bed28ecfbd8019d9af35"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6679
Md5:    4bb0e725719ac378134b01b6473a6581
Sha1:   a8a1780c88e8ae219048bed28ecfbd8019d9af35
Sha256: 187d4e83edc0af857334f84bd6853234193d4654d06c43367f39b4e125defe08
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf4a5986-35e6-4c6b-9dba-c981908d9ec1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8644
x-amzn-requestid: d6d71f42-f887-4ad0-a2b7-9073d3857b03
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OjRHBFoAMF4_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c47b-57490f255d8d30a561fdcd3a;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:36:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qfHMhMAdnYcOa0Xm23enTGXj4CQC-QFHV50Pq6QQdvM5YcIgUZVPRQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:54:36 GMT
etag: "bdaba3ed0c7efb65de88af96063d830683c8499b"
age: 45738
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8644
Md5:    726928e5de19ef978faebbe933c34008
Sha1:   bdaba3ed0c7efb65de88af96063d830683c8499b
Sha256: c6d208fcee052da80de1bf2dcccbbc48853511b8888c4777799ee676abba51b5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe56753b9-ced9-4038-88f6-9ea3a7bc9f04.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11205
x-amzn-requestid: abdf9c40-a2b7-49ae-bea1-ff5abfcea781
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fvszZFOZoAMFkNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc8e7b-6e508da05ff6f33e691de130;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 04:33:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hLrbI5Acy2RBlg7VqGE2b83zuqgt-bx0kD0nlH8uYaJ8tii2FqMLfw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:55:58 GMT
age: 45656
etag: "45f4ef9e68591c00669043abe96959bead8f17ae"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11205
Md5:    aa6c416b3a87ded887c9dcf7c51e5dd0
Sha1:   45f4ef9e68591c00669043abe96959bead8f17ae
Sha256: 9e10394b387916e40c44d4e02fbc1ea72214d870df189ce16d24015de00682bf
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F363ca744-ffa5-4390-9968-412e24620e36.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7847
x-amzn-requestid: 60759e32-ac58-4dda-8ea3-fd80413c0deb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_OkkEpMoAMFnGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c483-61b8715a0da73f4526215649;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:37:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NwaKQCUYm5ov0l7aSUXurRhRMvaAOsjf5QOIWCttb8xkUbgrQei-Yw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 21:52:18 GMT
age: 45876
etag: "eb0a900843beac5c4ee46686b89b3e8b8d77f80f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7847
Md5:    5129898de057eb92808f18d120eb7a70
Sha1:   eb0a900843beac5c4ee46686b89b3e8b8d77f80f
Sha256: 7ce3e4f7be652895e93cb8c1a9019b70d699c0a9da013d311395a6440b4e9f96
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8122ba3b-f49a-49fa-acfb-88990087de42.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6177
x-amzn-requestid: 729ae67c-5468-42a6-ba16-2a6a55db001d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f-tUbE7EoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e28f4f-7f1fa6e162899c495e44e643;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 17:50:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xTJKf69wk7qWWhBYf-qO61jOY2jXIC4FNdt4Mxt2dLDmLm5U9OocVQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 18:24:36 GMT
etag: "b073d213a6a7939efed7ee5ef62a5548e00082bc"
age: 58338
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6177
Md5:    25fb37d8b072e47aae74933481fb9418
Sha1:   b073d213a6a7939efed7ee5ef62a5548e00082bc
Sha256: 59a9c61013b3a4faab6f1c578f45bb87397d2f9e7975ae58e53e2c4e4a791da2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f728fd1-646b-418a-ab1a-194a7bf42969.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6805
x-amzn-requestid: ef7a879d-25be-42b0-a5c5-df6ad8f1482c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f_R2FFv5IAMFZ7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e2c9c0-2f8fa7ef41b70de04cfb5ac6;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 21:59:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JxJrYYY7fMm_DCBcuC4OEdR62HL5VMvJbt_a6TWp4QfqN0qxgFgj-A==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 22:06:50 GMT
etag: "5b37f807a19ffc80c0b9334e6d24d5bb717496ce"
age: 45004
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6805
Md5:    c8f31c82179856e39ee5fc43d7f0b685
Sha1:   5b37f807a19ffc80c0b9334e6d24d5bb717496ce
Sha256: c099c91c6f2125a8a89ee6e9dc0e37e2c2c9914adadb2c8b77795063baa62037
                                        
                                            GET /tracker.js?id=128710 HTTP/1.1 
Host: www.w3counter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://haidut.dyndns.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.26.7.93
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Wed, 08 Feb 2023 10:36:52 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.3.15
cache-control: no-cache
set-cookie: SERVERID=s4; path=/; Secure; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aTayzib5rBqKmpDbJhnNQqX2DrPzfQcmU%2BZ3ZFOK0W9oO9nVGDO7fPyl5b%2BSs%2FLbpPuapheW7%2FSPq0h0qxO4JQtTy2%2FpMxo9bUBRYPVJkZoxlryOvIa4k1jtOMoyUg5k6T0B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7963ba0aa86d0b3d-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/gridmode/assets/webfonts/fa-brands-400.woff2 HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://haidut.dyndns.org
Connection: keep-alive
Referer: http://haidut.me/

search
                                         172.104.14.178
HTTP/1.1 200 OK
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "19c40-5e73174d9eff1"
Accept-Ranges: bytes
Content-Length: 105536
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /wp-content/themes/gridmode/assets/webfonts/fa-solid-900.woff2 HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://haidut.dyndns.org
Connection: keep-alive
Referer: http://haidut.me/

search
                                         172.104.14.178
HTTP/1.1 200 OK
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "25a74-5e73174d9eff1"
Accept-Ranges: bytes
Content-Length: 154228
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /wp-content/themes/gridmode/assets/webfonts/fa-brands-400.ttf HTTP/1.1 
Host: haidut.me
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://haidut.dyndns.org
Connection: keep-alive
Referer: http://haidut.me/

search
                                         172.104.14.178
HTTP/1.1 200 OK
Content-Type: application/font-sfnt
                                        
Date: Wed, 08 Feb 2023 10:36:52 GMT
Server: Apache/2.4.29 (Ubuntu)
Last-Modified: Sat, 27 Aug 2022 04:28:03 GMT
ETag: "2c65c-5e73174d9eff1"
Accept-Ranges: bytes
Content-Length: 181852
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---