r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10214
Expires: Thu, 08 Sep 2022 06:25:37 GMT
Date: Thu, 08 Sep 2022 03:35:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 08 Sep 2022 03:05:10 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GhGYmkVLDAvrm0vWV5RIncsJAfHpPxKLeQgOxrMp5c8VdsYg0tExBg==
Age: 1813
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B5OdRSagfQ257RyB9SbvTazpkT3ni1wlmonznR3KbZU7QpWaoyE5zQ==
age: 85729
X-Firefox-Spdy: h2
www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
50.116.16.203200 OK 7.6 kB URL HTTP/1.1 www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
IP 50.116.16.203:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (328), with CRLF line terminators
Hash d7fd38d9217abce50e0e97e03e818da9
a5b2bb8c8843411bfdf62cb1d6f075cede8dd67a
373b6e5f8271687bb14eeee306922aa3bfbaf28bf263f0c2ffb59a504c4207e8
Analyzer Verdict Alert openphish Fifth Third Bank
quad9 Sinkholed
GET /login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0 HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:23 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 03:35:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b63f97bc3dce37e8ee6a0c9fcae468fe
cc70326582c0016d7434d0553486734266e57e71
6b3b365123beead4021532b8f2578b3761bbd47af45ed2a461a0476d53aa637d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 03:35:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.138200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
IP 142.250.74.138:0
File type ASCII text, with very long lines (32065)
Hash 6d973c8b7e2439d958e09c0a1ab9fe50
05ae0830200c20b9a2dfd5a825adc400481a60fb
f3c122dc227e829ed96b2a754296809201bd78abbad7ba50ef5079654e1cc894
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 23:24:22 GMT
expires: Thu, 07 Sep 2023 23:24:22 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 15062
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b63f97bc3dce37e8ee6a0c9fcae468fe
cc70326582c0016d7434d0553486734266e57e71
6b3b365123beead4021532b8f2578b3761bbd47af45ed2a461a0476d53aa637d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 03:35:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.secure53rd734.dubya.net/images/b9.png
50.116.16.203200 OK 554 B URL HTTP/1.1 www.secure53rd734.dubya.net/images/b9.png
IP 50.116.16.203:0
File type PNG image data, 39 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash b690340b05f4db1136533ed54115404d
67243c32be377ee948475f6ba18c19e6c512ecca
278b6c885842b54a55d312510aab32d986a8fdbef1b606604b2323d2dfedfea7
Analyzer Verdict Alert quad9 Sinkholed
GET /images/b9.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Sun, 29 Jul 2018 21:53:36 GMT
Accept-Ranges: bytes
Content-Length: 554
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 367a92e308b25781c245d77043c54a87
49a1e996384865b200d1a372d413bd2320a55f5d
fd1d93915495d623988e5627f76953a3e4771a8e3c2fafba0e0882f4a06b63ac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD1D93915495D623988E5627F76953A3E4771A8E3C2FAFBA0E0882F4A06B63AC"
Last-Modified: Tue, 06 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10395
Expires: Thu, 08 Sep 2022 06:28:39 GMT
Date: Thu, 08 Sep 2022 03:35:24 GMT
Connection: keep-alive
www.secure53rd734.dubya.net/images/ft22.png
50.116.16.203200 OK 25 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft22.png
IP 50.116.16.203:0
File type PNG image data, 155 x 235, 8-bit/color RGBA, non-interlaced\012- data
Hash 446c0620f89f8b20d22dffaf8ded00e7
990001c762531e0c2f6c7082082b3fd1944dad6b
102444baccc10903bef62611ac21c5a1981de686b134d708592c222b026c2139
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft22.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:26:54 GMT
Accept-Ranges: bytes
Content-Length: 24708
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft14.png
50.116.16.203200 OK 130 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft14.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 215, 8-bit/color RGBA, non-interlaced\012- data
Size 130 kB (130136 bytes)
Hash b36475affbb579756e9551cf79a81114
1b55351b04d113f8aa042db1753a55e4b7ce5ced
0097467f6305c79b5b177cc26a4f329abf94f9d2bd3d13f4ee96357aed34f00e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft14.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:22:34 GMT
Accept-Ranges: bytes
Content-Length: 130136
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft21.png
50.116.16.203200 OK 4.5 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft21.png
IP 50.116.16.203:0
File type PNG image data, 361 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 000c6131f2120e1628b2aca12851ee11
fc68e8e317042a04145c640517e690fa6675195d
649357cfcbd4cc0944bfd5a33ab787637b6dbba0dee93def474ecf3cfc08f7f0
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft21.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:26:30 GMT
Accept-Ranges: bytes
Content-Length: 4542
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 08 Sep 2022 02:38:18 GMT
Expires: Thu, 08 Sep 2022 03:03:02 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Z2pCKNIh1SjqCYmtdO0GLZrVwnQU6VEQq6v1Rs5SkGyzs1SVc89NIg==
Age: 3426
www.secure53rd734.dubya.net/images/ft12.png
50.116.16.203200 OK 69 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft12.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 198, 8-bit/color RGBA, non-interlaced\012- data
Hash 24bf29d3a2038c0432d7087fd78e3a16
f1619631ccd247e5551f7c0978f38e8bfea435f6
8c1c93c521e634e03443af3127f1b51bf28e0b3b8c0fd0ab63ee8e63e97f56b2
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft12.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:20:20 GMT
Accept-Ranges: bytes
Content-Length: 68695
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a81b0f5b5d11bf95fc176833b2f6e808
5b194aa5a8bf3a6b0d117ccfd0f487f6db0587b5
8f6ae83f2b85db7174bbbc6553e2921617b5c8a401315e76082682949a0bd9cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2934
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 03:35:24 GMT
Last-Modified: Thu, 08 Sep 2022 02:46:31 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
www.secure53rd734.dubya.net/images/ft15.png
50.116.16.203200 OK 25 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft15.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 210, 8-bit/color RGBA, non-interlaced\012- data
Hash 037375e352b152132f6aebda8cd5151f
5b523cc43d8041b0f740e8b2e95321fa21f7111b
8bd51bff480633218b2246093af999b90e219a34558d9ebe6da82756d77d9a85
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft15.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:22:58 GMT
Accept-Ranges: bytes
Content-Length: 25141
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft10.png
50.116.16.203200 OK 298 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft10.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 184, 8-bit/color RGBA, non-interlaced\012- data
Size 298 kB (298061 bytes)
Hash 48b9df00298f6691e29ed5f1c2deeac3
4be4e5619c7224fc2fba5e26db443cbf4b216791
9bb82c01b4c3916009e147dc86e5eb7f16c3d771985a1fafd645415e36a126ac
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft10.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:19:28 GMT
Accept-Ranges: bytes
Content-Length: 298061
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft9.png
50.116.16.203200 OK 273 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft9.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 191, 8-bit/color RGBA, non-interlaced\012- data
Size 273 kB (273046 bytes)
Hash 099f6666df5f42c61c1820412b8895a1
45a54b5068f67864da5fae2ace450d65b58da6da
e68043b8602b3d22bafe54ddddaa3ab727789fe48c85634cc7f25e140ddedbd6
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft9.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:18:34 GMT
Accept-Ranges: bytes
Content-Length: 273046
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/tw.png
50.116.16.203200 OK 1.5 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/tw.png
IP 50.116.16.203:0
File type PNG image data, 224 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash 887450cbcfad540ee5ffdc5142caaa1c
d5ba210d53e6205e15ac8b5ec83596bd328ff7ef
8f468e5c02d0a515faae5ab6f3bfbfb93b430869a42e206be8349780b71702b1
Analyzer Verdict Alert quad9 Sinkholed
GET /images/tw.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:26:02 GMT
Accept-Ranges: bytes
Content-Length: 1509
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft8.png
50.116.16.203200 OK 228 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft8.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 171, 8-bit/color RGBA, non-interlaced\012- data
Size 228 kB (227995 bytes)
Hash acef4b51842d0878d66eddca460ff18b
160b3ccb2b53558c6369f2b1ce2beb21d9487601
0986aeaf3a286dc3a8b706f724203cd2136fe7525c223025475111f907db5fb0
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft8.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:18:02 GMT
Accept-Ranges: bytes
Content-Length: 227995
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/b1.png
50.116.16.203200 OK 296 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/b1.png
IP 50.116.16.203:0
File type PNG image data, 1349 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size 296 kB (295771 bytes)
Hash 19888c7dec749f155fe711304ff491ca
8c0fb8e9fd08562cfee749700e25d0416b1033c6
f0be0d8d29a1b35272009b8ae1d8c3f9748b67c40400ea0fa3291abafb08a6bc
Analyzer Verdict Alert quad9 Sinkholed
GET /images/b1.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Sat, 22 Sep 2018 22:21:38 GMT
Accept-Ranges: bytes
Content-Length: 295771
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/b7.png
50.116.16.203200 OK 2.3 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/b7.png
IP 50.116.16.203:0
File type PNG image data, 209 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 4b600f5e64f051ddfe97ebbd563e7030
d4cc4994cc9a815d494a18078a425524fb116e4e
a3b687ef763b0ab034f7647b22b64c6e20b7ac2d7859a1f2bc06db9f293d879b
Analyzer Verdict Alert quad9 Sinkholed
GET /images/b7.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Wed, 06 Sep 2017 00:15:14 GMT
Accept-Ranges: bytes
Content-Length: 2328
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
push.services.mozilla.com/
52.41.246.187101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.41.246.187:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WWX+cl3fjv3piJbOSqfCaA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uRDU68vmt9JF5iS882/WLzoMb6w=
www.secure53rd734.dubya.net/images/b8.png
50.116.16.203200 OK 1.1 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/b8.png
IP 50.116.16.203:0
File type PNG image data, 62 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 407680d248016f3827fdc22b21b5fddf
cd5a0a75f85cd664e47660956ef09da010073ef4
d6561cce530d329d36cd835f10967638cefa7d91dce89e580fe99c009d4b1484
Analyzer Verdict Alert quad9 Sinkholed
GET /images/b8.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Wed, 06 Sep 2017 00:15:34 GMT
Accept-Ranges: bytes
Content-Length: 1074
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/loign.png
50.116.16.203200 OK 962 B URL HTTP/1.1 www.secure53rd734.dubya.net/images/loign.png
IP 50.116.16.203:0
File type PNG image data, 230 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash cf5e830931556fb2f6e5eea928ec8028
f51b316694eb01172c7fb830f10b862b41349d74
91dfe8f19806a6db155b625d54e69687e959598fae99bfa0f7866584a6461b8b
Analyzer Verdict Alert quad9 Sinkholed
GET /images/loign.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Sun, 29 Jul 2018 21:49:10 GMT
Accept-Ranges: bytes
Content-Length: 962
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft17.png
50.116.16.203200 OK 16 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft17.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash 875b6b28095102639537a4c3edb065c1
de5a1f6c677299e3bcbd8bfd4499a9bdd5488f27
5dfcc2cb667149fd5d5d970d56f153c615460f81499ce3f7161fe0daf10e6b7e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft17.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:23:56 GMT
Accept-Ranges: bytes
Content-Length: 15968
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft13.png
50.116.16.203200 OK 248 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft13.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 219, 8-bit/color RGBA, non-interlaced\012- data
Size 248 kB (247629 bytes)
Hash 15a3cd9015a6ab1d93f126072f30a074
000a2d7fc33f83b4a511a6bb7accec32a6e6df1c
6ff608f69ab3159ef41c595e4152a1d46576a0c6115e1faef9811d7bc209a94e
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft13.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:21:02 GMT
Accept-Ranges: bytes
Content-Length: 247629
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/b3.png
50.116.16.203200 OK 280 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/b3.png
IP 50.116.16.203:0
File type PNG image data, 1349 x 182, 8-bit/color RGBA, non-interlaced\012- data
Size 280 kB (279483 bytes)
Hash 274d7c4b20eb7beb45d81a33ffedcc4d
bfd5dd77351ec324e075ce5ebe39dac354ce4981
d3a08c42dbd1e171f43160d1824ccc910a9551f6224ff1fc1e59f4ea8d8b94ff
Analyzer Verdict Alert quad9 Sinkholed
GET /images/b3.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Sat, 22 Sep 2018 22:22:38 GMT
Accept-Ranges: bytes
Content-Length: 279483
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft19.png
50.116.16.203200 OK 7.7 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft19.png
IP 50.116.16.203:0
File type PNG image data, 1152 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f9c545842f7b714765bec31477150254
96ab1579e907cf84471a90c6d7a79d7538ea2c75
56cbf4493a4acd229b66c7f795a6dd4348db37abd9ac2448f2c029ab97a92b60
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft19.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:25:12 GMT
Accept-Ranges: bytes
Content-Length: 7693
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft18.png
50.116.16.203200 OK 8.2 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft18.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 169, 8-bit/color RGBA, non-interlaced\012- data
Hash eea41f286748c615d04180f19d890de1
631302634a0a550107cd34f91188a9e8e88070ab
24d8a52b1957b2e8f41cd46a2ff1e7896d83006491272b0f0937f53cadb347f6
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft18.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Tue, 06 Feb 2018 02:09:32 GMT
Accept-Ranges: bytes
Content-Length: 8236
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft20.png
50.116.16.203200 OK 2.2 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft20.png
IP 50.116.16.203:0
File type PNG image data, 155 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 8c56f8323f9a679d063bcdb8c6dc2188
f42cf956e2793cb99825919340fffdc6ea97cccb
5215c41645378bbae3b0825ce00234c4e731648477ade02d497d2f2c2464a0ca
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft20.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:25:36 GMT
Accept-Ranges: bytes
Content-Length: 2230
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft16.png
50.116.16.203200 OK 13 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft16.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 205, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b5f49569301f265fa9a4c368a589d8a
a10f6e48b6084d526c517377942cd123cc32f9f5
b59e5de8dcaae5da4f8632dddb3088b8c7cb8a8c6b75ca0b1b33dd76eef1c435
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft16.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:23:26 GMT
Accept-Ranges: bytes
Content-Length: 12709
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/ft11.png
50.116.16.203200 OK 378 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/ft11.png
IP 50.116.16.203:0
File type PNG image data, 1351 x 176, 8-bit/color RGBA, non-interlaced\012- data
Size 378 kB (377866 bytes)
Hash f392aea16ce6da0bd3cf14a733adef0c
0b345b694f7ed93a8882d7bce9fce5cbcd363313
75d837eb9526adfe286ab301897666ad00106697aa7bf23cbbb517c6c646fc71
Analyzer Verdict Alert quad9 Sinkholed
GET /images/ft11.png HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:24 GMT
Server: Apache
Last-Modified: Mon, 13 Feb 2017 11:19:50 GMT
Accept-Ranges: bytes
Content-Length: 377866
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
www.secure53rd734.dubya.net/images/favicon.ico
50.116.16.203200 OK 12 kB URL HTTP/1.1 www.secure53rd734.dubya.net/images/favicon.ico
IP 50.116.16.203:0
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 6196296d6da29c45fa85682fff153ecf
3d20183ede291a0f86f7a0a7d7fb81efa8b06c01
c84fa4b619a90081150350106c4d17279b260f7b0dc6ceea709ec8488cc34466
Analyzer Verdict Alert quad9 Sinkholed
GET /images/favicon.ico HTTP/1.1
Host: www.secure53rd734.dubya.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/login.php?cmd=login_submit&id=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0&session=f29c9380c52231060b8e374dfd5668a0f29c9380c52231060b8e374dfd5668a0
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:35:25 GMT
Server: Apache
Last-Modified: Wed, 06 Sep 2017 00:58:10 GMT
Accept-Ranges: bytes
Content-Length: 12219
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/x-icon
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13748
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 03:35:26 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13748
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 03:35:26 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13748
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 03:35:26 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13748
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 03:35:26 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13748
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 03:35:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8def29c-7ade-4990-abac-c54befd5dd27.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8def29c-7ade-4990-abac-c54befd5dd27.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b413a04f7d68e7fbcc3c8eca91c380c5
48c83029644495c0ee4041d647e7f29a38048825
d5fd885c0e8e9788d6006123b4eaa4e588ef7658b73c2f711445100142d784f4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8def29c-7ade-4990-abac-c54befd5dd27.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6330
x-amzn-requestid: 9e6e1482-e341-4abf-9aab-0c9a1c2911ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9TgGplIAMFd1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-69decda2237011501bdc7327;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KwVV15KPKIWgELQ4Svs5GDj2XZDia4tXiDyBXncXJKs_hCzK58DoRw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:02:24 GMT
etag: "48c83029644495c0ee4041d647e7f29a38048825"
content-type: image/jpeg
age: 19982
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
smallenvelop.com/wp-content/uploads/2014/08/Preloader_11.gif
194.1.147.58404 Not Found 19 kB URL HTTP/2 smallenvelop.com/wp-content/uploads/2014/08/Preloader_11.gif
IP 194.1.147.58:0
ASN #210250 K Media Tech Ltd.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8087), with CRLF, LF line terminators
Hash 8f42441ed890e40c14acfac8b2fc95cf
34e2f9955e16e79844d31ce27707c8473388db09
803b18af8b21bb3cb45eae2161c3927ab62c36cebeac3931f1a2942e9b7a8e8f
GET /wp-content/uploads/2014/08/Preloader_11.gif HTTP/1.1
Host: smallenvelop.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure53rd734.dubya.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Thu, 08 Sep 2022 03:35:24 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.28
set-cookie: PHPSESSID=le6jgg08qhkpqpg1uveki34o78; path=/; secure; HttpOnly
pragma: no-cache
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-ua-compatible: IE=edge
link: <https://smallenvelop.com/wp-json/>; rel="https://api.w.org/"
content-encoding: br
vary: Accept-Encoding
wpx: 1
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
x-turbo-charged-by: LiteSpeed
x-edge-location: WPX CLOUD/AMS02
server: WPX CLOUD/AMS02
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa8b5268-2aac-4f24-b390-b0e7248d123e.png
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa8b5268-2aac-4f24-b390-b0e7248d123e.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25f5b03125ec15193e9dc0970050c2c5
712d9774b838f4d0ade26b674e8d038295cf3a6b
858d64da226534e5a96cb11fedeee1d1d55c0ac9e54a1f98d10e29be0d39eca8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa8b5268-2aac-4f24-b390-b0e7248d123e.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16161
x-amzn-requestid: 041df785-47cb-476f-9c22-d1f776c34bdb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9ThG4uoAMF_Mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-66d92cab4181c30f66fe59c3;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 9uoDEctff88PBOVIGYxKdGXhcn20dRxRcnCEbq_PtSWvatkkIcI1WA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ca66331b52971370c4e54619e8a952cc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:47:05 GMT
age: 20901
etag: "712d9774b838f4d0ade26b674e8d038295cf3a6b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08c16db0-fc0c-4dde-ae07-9586e9adb562.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08c16db0-fc0c-4dde-ae07-9586e9adb562.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f691eddbd9502201c90f81568f4f63fc
6ed123d7a797b7eb52a34e87c79aa8562bede4e1
6d2b6ff8acdc63829050d68084997737ac8cbbe52aba6189ab8908f7dcb800b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08c16db0-fc0c-4dde-ae07-9586e9adb562.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9255
x-amzn-requestid: f4092ba2-d141-44cf-8e0e-a4ee46b397ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9ThFAeoAMFUPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-4ee1ceb30135f4e1763e98b9;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: tu-GbziQ9EiVPYqgRQACTqz4AziuY6YICQwMD6Rnk1dnvDKSRYCdIQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:52:01 GMT
age: 20605
etag: "6ed123d7a797b7eb52a34e87c79aa8562bede4e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f922505178de0cea92eedcfda85a9f67
50f1459de01174e594e03e7df4dfaa8eb1798672
981cd58768d6ad841673add855ddcc7106fbc85de05db9a1bd2d6bc8928b4c2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6214
x-amzn-requestid: 46a44af0-e547-49e8-bc39-f6c49d94e375
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj_0HFKbIAMFRbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b134d-0297c83c305422fa51b86dcf;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 07:03:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _ZKcuRO8Z6wBMdm79iDZj5uRYk4YYpYJqOoG8hZqY81O0R7hfbe5bQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 05:10:03 GMT
age: 80723
etag: "50f1459de01174e594e03e7df4dfaa8eb1798672"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a39739-e855-4625-859f-7e2fed3d2511.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a39739-e855-4625-859f-7e2fed3d2511.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a9ca2de4e61d1aae73da7d13ad3ec727
15cefe1e2be8ad63e40cfe02c2f5f8c59af015ad
911550bc2b8e4c4aad215692361fe494275002f89faa9eae2e2fc2664da1107c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5a39739-e855-4625-859f-7e2fed3d2511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12107
x-amzn-requestid: 9ea883d8-b844-49d0-8651-67124d2c0852
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9TgHANIAMF5rQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-137ad22c52baa6fb04ae190d;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fq_ew5bfpcSJ7F229SyDLZlpOnmSWujlU7HzwsQIS1q2HZSvsHGuvQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:58:58 GMT
etag: "15cefe1e2be8ad63e40cfe02c2f5f8c59af015ad"
content-type: image/jpeg
age: 20188
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2