Overview

URLrecoppgamyeng.dns05.com/
IP 103.250.10.167 ()
ASN#0
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-07 14:00:38 UTC
StatusLoading report..
IDS alerts3
Blocklist alert0
urlquery alerts
2
Suspicious - DynDNS domain
Tags dyndns

Domain Summary (11)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-07 04:12:09 UTC 54.188.209.121
recoppgamyeng.dns05.com (1) 0 2022-12-11 21:46:37 UTC 2023-01-07 14:00:22 UTC 103.250.10.167 Domain (dns05.com) ranked at: 215199
assets.plesk.com (17) 120376 2016-07-25 13:41:51 UTC 2023-01-07 04:10:45 UTC 185.76.9.26
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2023-01-07 07:18:20 UTC 93.184.220.29
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-07 04:12:09 UTC 34.117.237.239
ocsp.sca1b.amazontrust.com (2) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 143.204.42.158
firehose.us-west-2.amazonaws.com (2) 5730 2017-01-30 10:07:36 UTC 2023-01-07 07:16:31 UTC 35.89.72.103
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-01-07 04:09:20 UTC 34.120.237.76
r3.o.lencr.org (3) 344 2020-12-02 08:52:13 UTC 2023-01-07 04:09:06 UTC 23.36.77.32
firefox.settings.services.mozilla.com (1) 867 2020-05-25 20:06:39 UTC 2023-01-07 04:09:26 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-07 04:09:56 UTC 34.160.144.191

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-01-07 14:00:14 UTC 2 Client IP Internal IP ETPRO INFO DYNAMIC_DNS Query to a *.dns05.com Domain 
2023-01-07 14:00:14 UTC 2 Client IP Internal IP ETPRO INFO DYNAMIC_DNS Query to a *.dns05.com Domain 
2023-01-07 14:00:15 UTC 2 Client IP  103.250.10.167 ETPRO INFO DYNAMIC_DNS HTTP Request to a *.dns05.com Domain 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 103.250.10.167
Date UQ / IDS / BL URL IP
2023-01-07 14:00:38 +0000 2 - 3 - 0 recoppgamyeng.dns05.com/ 103.250.10.167


Last 5 reports on ASN:
Date UQ / IDS / BL URL IP
2023-03-25 23:23:40 +0000 0 - 0 - 1 links22.com/bonus/rules/1st-casino?btag=92098 (...) 178.253.47.211
2023-03-25 23:20:56 +0000 0 - 0 - 1 45.139.122.201/ 45.139.122.201
2023-03-25 23:20:08 +0000 0 - 0 - 2 18.154.48.56/ 18.154.48.56
2023-03-25 23:20:07 +0000 0 - 0 - 2 18.154.48.167/ 18.154.48.167
2023-03-25 23:16:25 +0000 0 - 0 - 3 apaebh.org.br/noticias/apaes-ha-62-anos-fazen (...) 45.152.44.189


Last 5 reports on domain: dns05.com
Date UQ / IDS / BL URL IP
2023-03-21 21:30:08 +0000 3 - 5 - 1 support-localbitcoins.dns05.com/ 23.254.229.103
2023-03-21 09:52:04 +0000 0 - 2 - 0 cit0nlinebank.dns05.com/login.php?online_id=9 (...) 20.213.110.36
2023-03-21 08:46:42 +0000 0 - 2 - 0 frostbnk.dns05.com/frost%20online%20banking/l (...) 34.77.55.241
2023-03-20 23:58:58 +0000 0 - 2 - 0 secureonlinebanking-citizens.dns05.com/login. (...) 34.139.23.96
2023-03-20 19:50:52 +0000 0 - 2 - 0 cit0nlinebank.dns05.com/login.php?online_id=9 (...) 20.213.110.36


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-16 15:03:59 +0000 0 - 0 - 6 101.53.144.154 101.53.144.154
2023-03-15 03:43:26 +0000 0 - 0 - 2 neuqembpen.net.ar/ 74.208.33.185
2023-03-15 00:15:44 +0000 0 - 0 - 1 92.205.111.185/ 92.205.111.185
2023-03-14 20:32:34 +0000 0 - 0 - 10 geldanfrage-susanne.de/ 91.218.65.223
2023-03-14 19:37:01 +0000 0 - 0 - 1 mailx.proquisamty.com/ 74.208.253.230

JavaScript

Executed Scripts (2)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 14275) - SHA256: f23fe1bfbffb31aa20716792e028e1b9996fdcd9647b134ceda5084d4af5f88d
< !doctype html >
    < html lang = "en" >
    < head >
    < meta charset = "utf-8" >
    < title > Web Server 's Default Page</title> < meta name = "copyright"
content = "Copyright 1999-2023. Plesk International GmbH. All rights reserved." >
    < meta http - equiv = "X-UA-Compatible"
content = "IE=edge,chrome=1" >
    < meta name = "viewport"
content = "width=device-width, initial-scale=1" >
    < link rel = "shortcut icon"
href = "https://assets.plesk.com/static/default-website-content/public/favicon-2d0e10.ico" >
    < link rel = "preload"
href = "https://assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-regular-65e877.woff2"
as = "font"
type = "font/woff2"
crossorigin >
    < style type = "text/css" >
    /* Copyright 1999-2023. Plesk International GmbH. All rights reserved. */

    @font - face {
        font - family: "Lato";
        font - display: swap;
        font - style: normal;
        font - weight: 400;
        src: local('Lato Regular'), local('Lato-Regular'), url(https: //assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-regular-65e877.woff2) format("woff2"),
                url(https: //assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-regular-319df0.woff) format("woff");
                }

                @
                font - face {
                    font - family: "Lato";
                    font - display: swap;
                    font - style: normal;
                    font - weight: 700;
                    src: local('Lato Bold'), local('Lato-Bold'), url(https: //assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-700-f1405b.woff2) format("woff2"),
                            url(https: //assets.plesk.com/static/default-website-content/public/fonts/lato-v16-latin-700-a354bb.woff) format("woff");
                            }

                            html {
                                line - height: 1.15; - webkit - text - size - adjust: 100 % ;
                                box - sizing: border - box;
                                height: 100 % ;
                                font - size: 10 px; - webkit - tap - highlight - color: transparent; - moz - osx - font - smoothing: grayscale; - webkit - font - smoothing: antialiased;
                            }

                            body {
                                display: flex;
                                margin: 0;
                                min - width: 280 px;
                                min - height: 100 vh;
                                font - size: 14 px;
                                line - height: 1.714e m;
                                font - family: "Lato",
                                sans - serif;
                                color: #222;
    word-wrap: break-word;
    background-color: # f3f3f3;
                            }

                            .page {
                                display: flex;
                                flex: 1;
                                flex - direction: column;
                                min - height: 100 vh;
                            }

                            a {
                                color: #03ade4;
    text-decoration: none;
    cursor: pointer;
    background-color: transparent;
    transition: 0.25s ease-in-out;
}

a:active,
a:hover {
    outline: none;
}

a:hover {
    color: # 259 ccc;
                            }

                            p,
                            ul {
                                margin: 0 0 16 px;
                            }

                            .header {
                                background - color: #374758;
    background-image: url(https://assets.plesk.com/static/default-website-content/public/img/header-bg-6827b7.svg);
}

.header__content {
    max-width: 960px;
    margin: auto;
    padding: 20px 20px 30px;
}

.header__title {
    margin: 12px 0;
    font-size: 28px;
    line-height: 1.286em;
    color: rgba(255, 255, 255, 0.9);
}

.header__message {
    position: relative;
    z-index: 1;
    margin: 0 0 30px;
    font-size: 16px;
    line-height: 24px;
    color: rgba(255, 255, 255, 0.9);
}

.header__message p,
.header__message ul {
    margin-bottom: 0;
}

.note {
    position: relative;
    display: flex;
    align-items: center;
    padding: 12px;
    font-size: 16px;
    line-height: 24px;
    background-color: rgba(255, 255, 255, 0.9);
    box-shadow: 0 4px 8px rgba(0, 0, 0, 0.4);
    border-radius: 4px;
}

.note:after {
    content: "";
    position: absolute;
    top: -76px;
    right: 32%;
    width: 72px;
    height: 143px;
    background: url(https://assets.plesk.com/static/default-website-content/public/img/guy-cc224f.png) no-repeat;
    background-size: contain;
}

.note__link {
    display: inline-flex;
    align-items: flex-start;
    margin-top: 4px;
    font-size: 14px;
    line-height: 20px;
}

.note__icon {
    margin: 2px 4px 0 0;
    opacity: 0.7;
}

.note__link:hover .note__icon {
    opacity: 1;
}

.note__button {
    display: inline-block;
    margin-left: 8px;
    padding: 8px 12px 10px;
    border-radius: 4px;
    font-weight: 700;
    font-size: 16px;
    line-height: 20px;
    color: rgba(255, 255, 255, 0.9);
    background-color: # 53 bce6;
                                z - index: 1;
                                white - space: nowrap;
                            }

                            .note__message {
                                flex: 1;
                                z - index: 1;
                            }

                            .note__button: hover {
                                color: rgba(255, 255, 255, 0.9);
                                background - color: #03ade4;
}

@media (max-width: 769px) {
    .header__title br {
        display: none;
    }
}

@media (min-width: 768px) {
    .header__inner {
        max-width: 1280px;
        margin: auto;
        background: url(https://assets.plesk.com/static/default-website-content/public/img/header-domain-page-98961e.png) 100% 0 no-repeat;
        background-size: 499px 420px;
    }

    .header__content {
        padding: 40px 20px;
    }

    .header__title {
        margin: 50px 0 18px;
    }

    .header__message {
        line-height: 28px;
    }

    .note {
        padding: 18px 24px;
        font-size: 18px;
        line-height: 28px;
    }

    .note__link {
        display: inline-flex;
        align-items: flex-start;
        margin-top: 4px;
        font-size: 16px;
        line-height: 24px;
    }

    .note__icon {
        margin-top: 4px;
    }

    .note__button {
        padding: 8px 30px 12px;
        font-size: 20px;
        line-height: 28px;
    }
}

.content {
    display: block;
    flex: auto;
}

.content__inner {
    max-width: 960px;
    margin: auto;
    padding: 26px 20px;
}

.content__title {
    margin: 0 0 8px;
    font-size: 20px;
    font-weight: 400;
    line-height: 28px;
}

.resources-list {
    display: flex;
    flex-wrap: wrap;
    padding: 16px 0 0;
    list-style: none;
    justify-content: space-around;
}

.resources-list__item {
    flex: 1 1 33%;
    min-width: 0;
    padding: 16px 0;
    box-sizing: border-box;
    text-align: center;
}

.resources-list__item > a {
    position: relative;
    display: inline-block;
    text-align: center;
}

.resources-list__item .icon {
    display: block;
    margin: 0 auto 8px;
    width: 48px;
    height: 48px;
    transition: 0.3s;
}

@media (min-width: 768px) {
    .columns {
        display: flex;
    }

    .columns__column {
        flex: 1;
        min-width: 0;
    }

    .resources-list__item > a {
        margin-left: 50px;
    }
}

.footer {
    flex: none;
    font-size: 13px;
    line-height: 20px;
    background-color: # 374758;
                                color: rgba(255, 255, 255, 0.4);
                            }

                            .footer a {
                                color: rgba(255, 255, 255, 0.4);
                                text - decoration: none;
                                font - weight: bold;
                            }

                            .footer a: hover {
                                color: rgba(255, 255, 255, 0.6);
                            }

                            .footer__inner {
                                margin: auto;
                                padding: 20 px;
                                max - width: 640 px;
                                text - align: center;
                            }

                            .icon - button {
                                display: inline - flex;
                                align - items: center;
                                padding: 13 px 20 px;
                                line - height: 20 px;
                                border: 1 px solid #53bce6;
    border-radius: 4px;
    background-color: # eef8fc;
                            }

                            .icon - button: hover {
                                background - color: # ddf2fb;
                            }

                            .icon - button__icon {
                                margin: -2 px 8 px - 8 px 0;
                            }

                            < /style> < /head> < body >
                            < div class = "page" >
                            < header class = "header" >
                            < div class = "header__inner" >
                            < div class = "header__content" >
                            < a class = "header__logo"
                            href = "https://www.plesk.com"
                            target = "_blank"
                            data - id = "logo-link" >
                            < img src = "https://assets.plesk.com/static/default-website-content/public/img/logo-ebb972.svg"
                            width = "98"
                            height = "41"
                            alt = "Plesk" >
                            < /a> < h1 class = "header__title" > Web Server 's Default Page</h1> < p class = "header__message" >
                            This page is generated by < a href = "https://www.plesk.com"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "server-link" > Plesk < /a>,
                            the leading hosting automation software. < br >
                            You see this page because there is no Web site at this address. < /p> < div class = "note" >
                            < div class = "note__message" >
                            < div > Log in to Plesk to create websites and set up hosting. < /div> < a class = "note__link"
                            href = "https://support.plesk.com/hc/en-us/articles/213413369-How-to-log-in-to-Plesk-"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "howtologin" >
                            < img class = "note__icon"
                            src = "https://assets.plesk.com/static/default-website-content/public/img/question-mark-circle-2b854e.svg"
                            alt = "" >
                            New to Plesk ? Learn how to log in and start working with it. < /a> < /div> < a class = "note__button"
                            href = "https:&#x2F;&#x2F;recoppgamyeng.dns05.com"
                            data - id = "plesk-login" > Log in to Plesk < /a> < /div> < /div> < /div> < /header> < main class = "content" >
                            < div class = "content__inner" >
                            < div class = "columns" >
                            < div class = "columns__column" >
                            < h2 class = "content__title" > What is Plesk < /h2> < p > < b > < a href = "https://www.plesk.com"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "content-plesk-link" > Plesk < /a></b > is a hosting < a href = "https://www.plesk.com/blog/business-industry/whats-control-panel-all-you-need-to-know/"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "content-control-panel-link" > control panel < /a>
                            with simple and secure web server, website and web apps management tools.It is specially designed to help web professionals manage web,
                            DNS, mail and other services through a comprehensive and user - friendly GUI.Plesk is about intelligently managing servers, apps,
                            websites and hosting businesses, on both traditional and cloud hosting. < /p> < a class = "icon-button"
                            href = "https://docs.plesk.com/try-plesk-now/"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "try-plesk" >
                            < img class = "icon-button__icon"
                            src = "https://assets.plesk.com/static/default-website-content/public/img/try-online-demo-e76f32.svg"
                            alt = "Try Online Demo" >
                            < span > Try Online Demo < /span> < /a> < /div> < div class = "columns__column" >
                            < ul class = "resources-list" >
                            < li class = "resources-list__item" >
                            < a class = "plesk-guides"
                            href = "https://docs.plesk.com/en-US/obsidian/"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "plesk-guides" >
                            < img class = "icon"
                            src = "https://assets.plesk.com/static/default-website-content/public/img/plesk-guides-466bdb.svg"
                            alt = "Plesk Guides" >
                            < span > Plesk Guides < /span> < /a> < /li> < li class = "resources-list__item" >
                            < a href = "https://support.plesk.com/hc/en-us"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "knowledge-base" >
                            < img class = "icon"
                            src = "https://assets.plesk.com/static/default-website-content/public/img/knowlede-base-e4cf57.svg"
                            alt = "Knowledge Base" >
                            < span > Knowledge Base < /span> < /a> < /li> < li class = "resources-list__item" >
                            < a href = "https://talk.plesk.com/"
                            target = "_blank"
                            data - id = "forum" >
                            < img class = "icon"
                            src = "https://assets.plesk.com/static/default-website-content/public/img/forum-a9076c.svg"
                            alt = "Forum" >
                            < span > Forum < /span> < /a> < /li> < li class = "resources-list__item" >
                            < a href = "https://www.plesk.com/blog/"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "developer-blog" >
                            < img class = "icon"
                            src = "https://assets.plesk.com/static/default-website-content/public/img/developers-blog-1dd547.svg"
                            alt = "Developer Blog" >
                            < span > Developer Blog < /span> < /a> < /li> < li class = "resources-list__item" >
                            < a href = "https://www.youtube.com/channel/UCeU-_6YHGQFcVSHLbEXLNlA/playlists"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "video-guides" >
                            < img class = "icon"
                            src = "https://assets.plesk.com/static/default-website-content/public/img/video-guides-0ca174.svg"
                            alt = "Video Guides" >
                            < span > Video Guides < /span> < /a> < /li> < li class = "resources-list__item" >
                            < a href = "https://www.facebook.com/Plesk"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "facebook" >
                            < img class = "icon"
                            src = "https://assets.plesk.com/static/default-website-content/public/img/facebook-2e0b41.svg"
                            alt = "Facebook" >
                            < span > Facebook < /span> < /a> < /li> < /ul> < /div> < /div> < /div> < /main> < footer class = "footer" >
                            < div class = "footer__inner" >
                            This page was generated by Plesk.Plesk is the leading WebOps platform to run, automate and grow applications, websites and hosting businesses.Learn more at < a href = "https://www.plesk.com"
                            target = "_blank"
                            rel = "nofollow noopener noreferrer"
                            data - id = "footer-plesk-link" > plesk.com < /a> < /div> < /footer> < script src = "https:&#x2F;&#x2F;assets.plesk.com&#x2F;static&#x2F;default-website-content&#x2F;public&#x2F;bundle.js" > < /script> < /div> < /body> < /html>


HTTP Transactions (36)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3FE7D1A9A55B86EC25D02634749CCFAE11F3477033BA8CD7AC4131B7948BA619"
Last-Modified: Sat, 07 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14448
Expires: Sat, 07 Jan 2023 18:01:14 GMT
Date: Sat, 07 Jan 2023 14:00:26 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EAAF4EBC59D2A06D02B552154C5ADB7C713FFC4A7F5CAABCFF1C2B4CD6EC5C7B"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17592
Expires: Sat, 07 Jan 2023 18:53:38 GMT
Date: Sat, 07 Jan 2023 14:00:26 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "80EC1E61F9563E799C9F44EA31E616C37DAEA1B9670091FBBC6EFC39EBAFE3D3"
Last-Modified: Fri, 06 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15243
Expires: Sat, 07 Jan 2023 18:14:30 GMT
Date: Sat, 07 Jan 2023 14:00:27 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 07 Jan 2023 13:48:08 GMT
age: 739
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    ff250d3ef3fa45322bf05039a0122a9f
Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d
Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: ubwKR/PKAL0g+2pUX6ru8cYFHhIu4iNV47LaE3aXTLGLmLoJOklW0vOstj1o25bDyVR6YWzRD8w=
x-amz-request-id: G31MR299AQXAQ5ZX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 07 Jan 2023 14:00:26 GMT
age: 1
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b1fcd419a4245617397846e8d17233f6
Sha1:   2a037ce244587640b27ead9a0ec2af4f862d91b2
Sha256: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 07 Jan 2023 14:00:27 GMT
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: recoppgamyeng.dns05.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         103.250.10.167
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 07 Jan 2023 14:00:27 GMT
Content-Length: 432
Connection: keep-alive
Last-Modified: Tue, 01 Nov 2022 15:02:40 GMT
ETag: "1b0-5ec6a03eb6400"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   432
Md5:    da88e488d4a55585b5be975d0fef7cfd
Sha1:   6336234140f35a2e43ed545c1abc3384653f4088
Sha256: 3fb55c8ec340149d962af32f0a37622ba172c2a59107fc2dad6eb511ed91bba3

Alerts:
  urlquery:
    - Suspicious - DynDNS domain
  IDS:
    - ETPRO INFO DYNAMIC_DNS HTTP Request to a *.dns05.com Domain
                                        
                                            GET /static/default-website-content/public/fonts/lato-v16-latin-700-f1405b.woff2 HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://recoppgamyeng.dns05.com
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
content-length: 22992
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: "63b2c75a-59d0"
expires: Mon, 02 Jan 2023 12:14:51 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: FD44:183A:1090A39:174A79E:63B2C862
via: 1.1 varnish
age: 0
x-served-by: cache-bma1666-BMA
x-cache-hits: 0
x-timer: S1672661091.282553,VS0,VE102
vary: Accept-Encoding
x-fastly-request-id: b745fd9848b86fae166ce7f05eb89a8ee24751b9
x-accel-expires: @1673100064
server: CDN77-Turbo
x-77-nzt: AblMCRR9Arv/MwIAAA
x-77-nzt-ray: af58563011b6c49efb7ab96352918120
x-cache: HIT
x-age: 563
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22992, version 1.0\012- data
Size:   22992
Md5:    1efbd38aa76ddae2580fedf378276333
Sha1:   8a49976f2470ba2a1db6144245355d3b889312e4
Sha256: 8d3ca80fa271e94b0c36cf3053b0f806b7a42bb3395b424c99dc0bd218f0ac20
                                        
                                            GET /static/default-website-content/public/fonts/lato-v16-latin-regular-65e877.woff2 HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://recoppgamyeng.dns05.com
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
content-length: 23484
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: "63b2c75a-5bbc"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: DBC0:0517:F72459:162AA4A:63B2C818
via: 1.1 varnish
age: 0
x-served-by: cache-bma1673-BMA
x-cache-hits: 0
x-timer: S1672661017.538522,VS0,VE95
vary: Accept-Encoding
x-fastly-request-id: d672e1bf4d80c1b86de1c938d498821d9f3d206a
x-accel-expires: @1673100194
server: CDN77-Turbo
x-77-nzt: AblMCRRmO+3/sQEAAA
x-77-nzt-ray: af58563011b6f89ffb7ab963c4feb120
x-cache: HIT
x-age: 433
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23484, version 1.0\012- data
Size:   23484
Md5:    b4d2c4c39853ee244272c04999b230ba
Sha1:   c82e22dde9716c40ba20e6c7ed03a1b66556de15
Sha256: c3c0d3f472358aac78455515c4800771426770c22698e2486d39fdb5505634e1
                                        
                                            GET /static/default-website-content/public/img/guy-cc224f.png HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
content-length: 9999
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: "63b2c75a-270f"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 899A:056E:10B5F31:176F340:63B2C818
via: 1.1 varnish
age: 0
x-served-by: cache-bma1657-BMA
x-cache-hits: 0
x-timer: S1672661016.343590,VS0,VE105
vary: Accept-Encoding
x-fastly-request-id: a59a52e1cca300a0655ab6314af85e56e7191a1f
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRQ4CL3/MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab96337197f20
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 144 x 286, 8-bit/color RGBA, non-interlaced\012- data
Size:   9999
Md5:    508c30a08de6e9a033e045a6979f76d7
Sha1:   8bbde0114d14ef4e0687fab5cc70e3bd4d96c233
Sha256: 40d72d259fff82a177cd2c2f2a1bd0024ec04a2cd5a19d5596187755cc2ae5f2
                                        
                                            GET /static/default-website-content/public/img/header-domain-page-98961e.png HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
content-length: 191877
permissions-policy: interest-cohort=()
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: "63b2c75a-2ed85"
expires: Mon, 02 Jan 2023 12:16:13 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: 2152:D7EF:12F8BD9:13E7EEB:63B2C918
via: 1.1 varnish
age: 165
x-served-by: cache-bma1645-BMA
x-cache-hits: 1
x-timer: S1672661437.383295,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: 430ca60752ebee5220cc113ab96cce2521bc6396
x-accel-expires: @1673100092
server: CDN77-Turbo
x-77-nzt: AblMCRRp+Mb/FwIAAA
x-77-nzt-ray: af58563011b6c49efb7ab9634bb37c20
x-cache: HIT
x-age: 535
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 998 x 840, 8-bit/color RGBA, non-interlaced\012- data
Size:   191877
Md5:    15b75d100a555e3f0d84c59d81dd46e8
Sha1:   435e0f337cf2fb81d65fa4aa1c14caaa109f5bc6
Sha256: f2fd07b6c6a69ba71eb8513377f052f5b692d610a2e890151084e7fcfb09799d
                                        
                                            GET /static/default-website-content/public/favicon-2d0e10.ico HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
content-length: 113459
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: "63b2c75a-1bb33"
expires: Mon, 02 Jan 2023 12:13:42 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 1F7E:2669:1152023:180B499:63B2C81E
via: 1.1 varnish
age: 570
x-served-by: cache-bma1666-BMA
x-cache-hits: 1
x-timer: S1672661593.097195,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: 2e331d70e8570c8230905cf7403ad3c19b1904d7
x-accel-expires: @1673100143
server: CDN77-Turbo
x-77-nzt: AblMCRSi6fv/5AEAAA
x-77-nzt-ray: af58563011b6c49efb7ab963bcd37323
x-cache: HIT
x-age: 484
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 7 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel\012- data
Size:   113459
Md5:    1db747255c64a30f9236e9d929e986ca
Sha1:   384023452346aa087d40c93c23ca2f5e32ff1b1f
Sha256: 88baf40feb43463a8f6aa6543e88bdbe33f0db9a317486e786eee1e5c76a9544
                                        
                                            GET /static/default-website-content/public/img/developers-blog-1dd547.svg HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-51f"
expires: Mon, 02 Jan 2023 12:13:41 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: BE42:7E18:FE7F48:16A0573:63B2C84E
via: 1.1 varnish
age: 0
x-served-by: cache-bma1661-BMA
x-cache-hits: 0
x-timer: S1672661071.693558,VS0,VE104
vary: Accept-Encoding
x-fastly-request-id: a4b833ed4dc24f69207880a9fcac65de08c62b01
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRTubs3/MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab963faf67a1f
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4589
Cache-Control: 'max-age=158059'
Date: Sat, 07 Jan 2023 14:00:27 GMT
Last-Modified: Sat, 07 Jan 2023 12:43:58 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Vp0Bz/etxD07kuVh2uwqfA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.188.209.121
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QmKXRLB4UQOPPOnChkEYKdw7pS0=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=147457
Date: Sat, 07 Jan 2023 14:00:28 GMT
Etag: "63b903a6-1d7"
Expires: Mon, 09 Jan 2023 06:58:05 GMT
Last-Modified: Sat, 07 Jan 2023 05:31:18 GMT
Server: ECS (nyb/1D18)
X-Cache: Miss from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: s82SNRgYbrRwIEVvruxx7Gf0ABE5y4tdwQssWT3ReNE_v2X49HCqgg==
Age: 5207

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=145201
Date: Sat, 07 Jan 2023 14:00:28 GMT
Etag: "63b903a6-1d7"
Expires: Mon, 09 Jan 2023 06:20:29 GMT
Last-Modified: Sat, 07 Jan 2023 05:31:18 GMT
Server: ECS (dcb/7EEB)
X-Cache: Miss from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bdZj4odREz5HHW9sDjGp5YFLZ5Ieyf1c7BrLDHo8jcPtL_-lcFb4tw==
Age: 2951

                                        
                                            OPTIONS / HTTP/1.1 
Host: firehose.us-west-2.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent
Referer: http://recoppgamyeng.dns05.com/
Origin: http://recoppgamyeng.dns05.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.89.72.103
HTTP/1.1 200 OK
                                        
x-amzn-RequestId: f1f5e6ad-a75b-f7e4-adc6-9b91a4490e53
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Access-Control-Allow-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent
Access-Control-Allow-Methods: POST
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date
Access-Control-Max-Age: 172800
Content-Length: 20
Date: Sat, 07 Jan 2023 14:00:27 GMT

                                        
                                            POST / HTTP/1.1 
Host: firehose.us-west-2.amazonaws.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Amz-User-Agent: aws-sdk-js/2.1286.0 callback
Content-Type: application/x-amz-json-1.1
X-Amz-Target: Firehose_20150804.PutRecord
X-Amz-Content-Sha256: d5c517095048721587985b16dc557cc375ef8bce529c40afe94a45d97ac938cb
X-Amz-Date: 20230107T140016Z
Authorization: AWS4-HMAC-SHA256 Credential=AKIAR4YEYRJL6JKBNRGP/20230107/us-west-2/firehose/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=d5d95bd70c04a360b8cfb35718e4be724841254a39eccc77c262234ecc1f7762
Content-Length: 108
Origin: http://recoppgamyeng.dns05.com
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.89.72.103
HTTP/1.1 200 OK
Content-Type: application/x-amz-json-1.1
                                        
x-amzn-RequestId: d595b5fa-0719-f049-89a6-c8c6040b09fe
Access-Control-Allow-Origin: *
Content-Encoding: gzip
x-amz-id-2: v3WFYn5wvgSMogQvXWpfGzQwv2p3yUdlSyW5UEUKRfLOmsoSInSCsbZTq5UdzylAmEGJ5ODJNeb8tH9YMhycrK/FxT0G7MPU
Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amz-request-id,x-amz-id-2,x-amzn-ErrorMessage,Date
Content-Length: 248
Date: Sat, 07 Jan 2023 14:00:27 GMT


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   248
Md5:    6d3d4bbc729023dbdf36000d709a80c9
Sha1:   ff426e743826ed62f3df321c73e7331bad2dd126
Sha256: 853020242974f747de8432bcbad97cf2c6ac749808e6388845014f529c370220
                                        
                                            GET /static/default-website-content/public/default-server-index.js HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-61d9"
expires: Mon, 02 Jan 2023 12:17:08 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 76D0:1572:108E4C2:18D724A:63B2C8EC
via: 1.1 varnish
age: 19
x-served-by: cache-bma1667-BMA
x-cache-hits: 1
x-timer: S1672661248.539516,VS0,VE5
vary: Accept-Encoding
x-fastly-request-id: f78f1781fff4d87caae4db03a22d54a887d7f33a
x-accel-expires: @1673100194
server: CDN77-Turbo
x-77-nzt: AblMCRSgU+3/sQEAAA
x-77-nzt-ray: af58563011b6c49efb7ab9633921381a
x-cache: HIT
x-age: 433
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   7998
Md5:    a6ca2c9b1f024aaeabddcc5962c580d6
Sha1:   b4e245e83523dca3b09dca5e0ec48492a914d076
Sha256: 0dce3c1457f80ba1a24b5c490adf0442a35f88ca16ca9a7ac5d05bcec3568bb9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32750e1f-43b2-4ea2-9562-1ec8c85222fe.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8704
x-amzn-requestid: 1a997886-3172-4ba2-967d-328539cf685c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eVxErFfVoAMFhYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b89550-7c30a3ff5d97f8b421776fb5;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 21:40:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: CKplX8NiGi4DVG0lwV2LILGwKdV6wOzThlE7SEjStyLgYQieTmJfPw==
via: 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 21:47:57 GMT
age: 58352
etag: "74f544d78132f079b849fc2ef613a892c515378f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8704
Md5:    05977aeaee3d020a9e54b103bff0072e
Sha1:   74f544d78132f079b849fc2ef613a892c515378f
Sha256: 72b0b5e6ed8685fa24bd66e4173db1701b4a48b3df15c86228b833e615935da8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5c619dc-4aba-44fa-b20f-5156f0b5ce48.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10809
x-amzn-requestid: 6871f0ab-096d-42bc-82c4-ed72871efd30
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d4DgmF_EIAMF_Jw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63acb2d0-551e264261f23a0f3afa9213;Sampled=0
x-amzn-remapped-date: Wed, 28 Dec 2022 21:19:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BoHEdJaS8XPY5eqT7q4mdxypOsnxpFgvMoB5O8iKkMSiNicBZgz5mw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 21:49:53 GMT
age: 58236
etag: "f298bf34671800af23c78a4dcc14ff0ed60f48e8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10809
Md5:    5196aa81157b1c7f02a2aeec700cb184
Sha1:   f298bf34671800af23c78a4dcc14ff0ed60f48e8
Sha256: ecdaf55df4565409bd6f6cb66a7272e9a6f3cee750437df658d4412827e0d042
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7308753d-b099-45a9-ac63-aeb8be417c01.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4795
x-amzn-requestid: b8d2ba5b-92d8-40cc-8954-55bd8ed1dd34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eS7RFFznIAMFe4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b7726d-00b967487cd1c1380f7f66d5;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 00:59:25 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: J5tHsDq4lTlbPv5Mn-ed27WzQv8bSPH21bGKTfYmKg3Y1hVZ_3Y2qA==
via: 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 548adcda884eed02304ba5d6a1d7f514.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 09:24:53 GMT
age: 16536
etag: "3dba315adee4a143e7368e64c52c8766895a754c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4795
Md5:    4ac8905d1d5c1d4287877b2cd12c578f
Sha1:   3dba315adee4a143e7368e64c52c8766895a754c
Sha256: 7c19db731473111c9e8a0d939b1204b59e11a887cd90774b48d3dfa974cb491d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vIFVXgt2RmoplkAVOtUrOkXj3LmhRw-XEPe7fugZ2-mv_iDY07XzUg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 08:42:42 GMT
age: 19067
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5578
Md5:    e832123ea0c92a446b5894e75efc86ae
Sha1:   bb438ca635b43819701067ef07a3d910ad29a0c7
Sha256: e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe337b2fa-7f8d-45d1-9c3b-36a6e16363af.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13620
x-amzn-requestid: 0858cbd0-5965-477b-9d5f-015243f86e12
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePk56F4JoAMF5Uw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b61b72-705a9ad403bb7795397926fd;Sampled=0
x-amzn-remapped-date: Thu, 05 Jan 2023 00:36:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DoKiNkOKV6r5zqczq2ckoyb9UJyMABXfyn6WE1NerYovg8yg-AeePQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 10:11:59 GMT
age: 13710
etag: "625cfd3806740998c859fef8c1153efea72f5342"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13620
Md5:    3356bee662c2ea20cbebff5293e73340
Sha1:   625cfd3806740998c859fef8c1153efea72f5342
Sha256: cd973426a15b28fa2c141e927ebf4e12faa05665780a3cd5010f874769b336e7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1787721-cbc0-4d0c-9ab8-c2bf14e3c622.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10064
x-amzn-requestid: 7b970f82-e9fa-43e8-8757-60ae808a2cff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eP6kCEsSIAMFVBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b63e19-4884229c1545eef72380e7d2;Sampled=0
x-amzn-remapped-date: Thu, 05 Jan 2023 03:03:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wWDCvYZY8VpfF4a5AWmjrZZx3vzUv7qWCz_g9vNlkMz5Sy3NaaWMVQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 07 Jan 2023 03:33:10 GMT
age: 37639
etag: "5b24f4bf17da840e61d96b0ed7452911539dbf67"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10064
Md5:    65a13b7b11843a364e80dbc2d54345ff
Sha1:   5b24f4bf17da840e61d96b0ed7452911539dbf67
Sha256: 8dea14e05eb2a0c850fe9441b605f50ec6206baf57da4293f2297cab0a82fe37
                                        
                                            GET /static/default-website-content/public/img/logo-ebb972.svg HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-86f"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 6AFE:3368:107664D:172EED4:63B2C818
via: 1.1 varnish
age: 0
x-served-by: cache-bma1674-BMA
x-cache-hits: 0
x-timer: S1672661016.213587,VS0,VE112
vary: Accept-Encoding
x-fastly-request-id: 63b940857d9450d0a18197ffe3942fef95a88414
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRQ13If/MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab96313da2a1f
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/default-website-content/public/img/plesk-guides-466bdb.svg HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-8e6"
expires: Mon, 02 Jan 2023 12:14:30 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: F256:4C6A:105BBDD:171424C:63B2C84E
via: 1.1 varnish
age: 0
x-served-by: cache-bma1652-BMA
x-cache-hits: 0
x-timer: S1672661071.689081,VS0,VE101
vary: Accept-Encoding
x-fastly-request-id: ccf844cff2f5dced53eeb9b4704b23f644caa88d
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRRH98v/MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab9636695561f
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/default-website-content/public/bundle.js HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-47d12"
expires: Mon, 02 Jan 2023 12:11:58 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: 7CA6:B0F7:1134214:121891B:63B2C7F7
via: 1.1 varnish
age: 0
x-served-by: cache-bma1650-BMA
x-cache-hits: 0
x-timer: S1672660984.886140,VS0,VE135
vary: Accept-Encoding
x-fastly-request-id: e4d55b06f35111ee41ec46cb6171983f45d35043
x-accel-expires: @1673100063
server: CDN77-Turbo
x-77-nzt: AblMCRS7t1j/NAIAAA
x-77-nzt-ray: af58563011b6c49efb7ab963dec6cc1f
x-cache: HIT
x-age: 564
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/default-website-content/public/img/forum-a9076c.svg HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-1569"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 80AE:6E39:117806B:1831353:63B2C818
via: 1.1 varnish
age: 0
x-served-by: cache-bma1660-BMA
x-cache-hits: 0
x-timer: S1672661016.345980,VS0,VE101
vary: Accept-Encoding
x-fastly-request-id: 5341c9ecd4c2fa2e9b2d48ec83860e4109e6af9f
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRRjXVD/MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab963abcf6f1f
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/default-website-content/public/img/header-bg-6827b7.svg HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-132"
expires: Mon, 02 Jan 2023 12:12:52 GMT
cache-control: max-age=600
x-proxy-cache: HIT
x-github-request-id: 6AFE:3368:1076653:172EEDA:63B2C818
via: 1.1 varnish
age: 0
x-served-by: cache-bma1643-BMA
x-cache-hits: 0
x-timer: S1672661016.338763,VS0,VE101
vary: Accept-Encoding
x-fastly-request-id: 41728e9970b1fb6d2515c7a726be877ad92e445c
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRSJnb//MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab963583b7020
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/default-website-content/public/img/facebook-2e0b41.svg HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-318"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: A72C:3A7D:1067C6E:17203F0:63B2C818
via: 1.1 varnish
age: 0
x-served-by: cache-bma1626-BMA
x-cache-hits: 0
x-timer: S1672661016.361688,VS0,VE96
vary: Accept-Encoding
x-fastly-request-id: c0043e5142d35dba3f7a265733dcb8d1397722df
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRR1orr/MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab9633cc7c81f
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/default-website-content/public/img/question-mark-circle-2b854e.svg HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-1ce"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: A284:3610:1101362:17BAB89:63B2C818
via: 1.1 varnish
age: 0
x-served-by: cache-bma1643-BMA
x-cache-hits: 0
x-timer: S1672661016.213235,VS0,VE103
vary: Accept-Encoding
x-fastly-request-id: 35dfba27b57bfaad353b8b6b9bf727ff6b13aeff
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRT/W83/MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab963bb253a1f
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/default-website-content/public/img/try-online-demo-e76f32.svg HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-6e9"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 4F06:0131:1023AB1:16DC696:63B2C818
via: 1.1 varnish
age: 0
x-served-by: cache-bma1671-BMA
x-cache-hits: 0
x-timer: S1672661016.344777,VS0,VE102
vary: Accept-Encoding
x-fastly-request-id: d4ba5d381b82e98db9430caf84533e73683ac0ef
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRRua2P/MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab963b1fd451f
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/default-website-content/public/img/knowlede-base-e4cf57.svg HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-332"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 7D10:79F0:10B2413:176B918:63B2C818
via: 1.1 varnish
age: 0
x-served-by: cache-bma1635-BMA
x-cache-hits: 0
x-timer: S1672661016.344333,VS0,VE97
vary: Accept-Encoding
x-fastly-request-id: 73660022edee140e9ce23f5e7692ddb88082ab86
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRRZX4P/MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab96328c4651f
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /static/default-website-content/public/img/video-guides-0ca174.svg HTTP/1.1 
Host: assets.plesk.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://recoppgamyeng.dns05.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.76.9.26
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Sat, 07 Jan 2023 14:00:27 GMT
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 02 Jan 2023 12:00:26 GMT
access-control-allow-origin: *
etag: W/"63b2c75a-509"
expires: Mon, 02 Jan 2023 12:13:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 0DD4:0517:F7244E:162AA3A:63B2C818
via: 1.1 varnish
age: 0
x-served-by: cache-bma1635-BMA
x-cache-hits: 0
x-timer: S1672661016.345601,VS0,VE102
vary: Accept-Encoding
x-fastly-request-id: 3aa203879daf79ee41c1dbe50b001a722b3f572c
x-accel-expires: @1673100321
server: CDN77-Turbo
x-77-nzt: AblMCRQ2EVf/MgEAAA
x-77-nzt-ray: af58563011b6c49efb7ab963da5a861f
x-cache: HIT
x-age: 306
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---