televipo.site/co/fortune/nl?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
301 Moved Permanently 559 B URL HTTP/1.1 televipo.site/co/fortune/nl?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
IP
ASN #212531 UAB Interneto vizija
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (401)
Hash 3b98f35a83613f1122b98b252cf44b71
76e24e4f1f277e3529251d28861d03d09794555b
72b138b2f8bf55f1fd08b3fd6ee4246865c36a63626165032396d1e1fd274135
GET /co/fortune/nl?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com HTTP/1.1
Host: televipo.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 10 Nov 2022 00:02:06 GMT
Server: Apache
Location: http://televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
Content-Length: 559
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aabe410b4bbe4d8beb0e4561d3aa158e
e1788632902ddea62cdd9e7ad6009a75ffb69788
ad535e27b201e92670770b2b868c58f7c05633ec66490a41ef4592f062834c1f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD535E27B201E92670770B2B868C58F7C05633EC66490A41EF4592F062834C1F"
Last-Modified: Wed, 09 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2162
Expires: Thu, 10 Nov 2022 00:38:08 GMT
Date: Thu, 10 Nov 2022 00:02:06 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 4c6e4047ec266b87485610e26a85bb6f
cd543757597609d7309d02652318359078a965c2
d8aff7a24f3274782b4f41d6dbd181ba817f5a562d992a3a82966481c91f8a90
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4831
Cache-Control: max-age=128969
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 00:02:06 GMT
Etag: "636b8168-1d7"
Expires: Fri, 11 Nov 2022 11:51:35 GMT
Last-Modified: Wed, 09 Nov 2022 10:31:04 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dc90abd8b3ea8e75a68c144d74d75788
1ce29dca1ee9ca8931397de31ffb6cf7833baaf8
807000997bcf1b7a1fa35e43908cbfa54cd1704a5a0f53c09e1ae154638f10e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "807000997BCF1B7A1FA35E43908CBFA54CD1704A5A0F53C09E1AE154638F10E0"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7092
Expires: Thu, 10 Nov 2022 02:00:18 GMT
Date: Thu, 10 Nov 2022 00:02:06 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BhRSZoZXmkcVrIEwFRm3GJ4N3+2Syph1OHBc2/qKV9oi4XMVzoS7ASz3PVWkiuTp2/zYG28EXc8=
x-amz-request-id: 6RYASCSHG75H4BGW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 09 Nov 2022 23:11:54 GMT
age: 3012
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
200 OK 7.8 kB URL HTTP/1.1 televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
IP
ASN #212531 UAB Interneto vizija
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (15723)
Hash d11c5672b6037a630e1726210c9785cf
fdf6e849c486344a8a49aca939b2c4912f1287a9
90b94a3fa25d71d6afc6de26a4ae0805576f83e6c84757a6760bb215e296e9fe
GET /co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com HTTP/1.1
Host: televipo.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 00:02:06 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 00:02:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
televipo.site/co/fortune/nl/css/amazon.css
200 OK 1.4 kB URL HTTP/1.1 televipo.site/co/fortune/nl/css/amazon.css
IP
ASN #212531 UAB Interneto vizija
File type CSV text\012- , ASCII text
Hash 2b377b677749958f83d942a13e3a790b
02a72c111604dbdaa66f94c370a856e4467346da
453c7de363ea54fb142b464507e659f818b4b72f760a87e3e39b3322b630fce1
GET /co/fortune/nl/css/amazon.css HTTP/1.1
Host: televipo.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 00:02:06 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 08:45:28 GMT
ETag: "13d0-5ec78dcd8be0f-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Thu, 17 Nov 2022 00:02:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1417
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/css
televipo.site/co/fortune/nl/images/refresh.png
200 OK 1.6 kB URL HTTP/1.1 televipo.site/co/fortune/nl/images/refresh.png
IP
ASN #212531 UAB Interneto vizija
File type PNG image data, 60 x 54, 8-bit/color RGB, non-interlaced\012- data
Hash d99fc136124666d07dcd92ee9b57ab11
2da33147905803cba909fb0f6118a19934127339
b0947ebbd1659de62310b214d9752e9625147e43ac1c271d2a9bb68e881221ff
GET /co/fortune/nl/images/refresh.png HTTP/1.1
Host: televipo.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 00:02:06 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 02 Nov 2022 08:45:29 GMT
ETag: "664-5ec78dcdaf85f"
Accept-Ranges: bytes
Content-Length: 1636
Cache-Control: max-age=604800
Expires: Thu, 17 Nov 2022 00:02:06 GMT
Keep-Alive: timeout=2, max=100
Content-Type: image/png
televipo.site/co/fortune/nl/images/gift.gif
200 OK 16 kB URL HTTP/1.1 televipo.site/co/fortune/nl/images/gift.gif
IP
ASN #212531 UAB Interneto vizija
File type GIF image data, version 89a, 100 x 100\012- data
Hash 573c467d7a0b1c4c009ba98927dfa335
78d9c7efaeed568b74f1e4d1b4eb67e51dbbb9f1
c4f1d8867d03d437694f1cac0c9df3a7f5006fb8df474023bfa1d78f88843ce8
GET /co/fortune/nl/images/gift.gif HTTP/1.1
Host: televipo.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 00:02:06 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 02 Nov 2022 08:45:29 GMT
ETag: "3cf6-5ec78dcda4c7f"
Accept-Ranges: bytes
Content-Length: 15606
Cache-Control: max-age=604800
Expires: Thu, 17 Nov 2022 00:02:06 GMT
Keep-Alive: timeout=2, max=100
Content-Type: image/gif
televipo.site/co/fortune/nl/js/jquery.min.js
200 OK 33 kB URL HTTP/1.1 televipo.site/co/fortune/nl/js/jquery.min.js
IP
ASN #212531 UAB Interneto vizija
File type ASCII text, with very long lines (32341)
Hash a455443006938869e740a38df8640ada
869bd24af8e61e2c6b23cf158853505d5fe7afc2
685bd4372d5eca42e9dae6db1678618e08d2ca201bc4e7525adabc20021338b5
GET /co/fortune/nl/js/jquery.min.js HTTP/1.1
Host: televipo.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 00:02:06 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 02 Nov 2022 08:45:29 GMT
ETag: "1787d-5ec78dcdcfbff-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Thu, 17 Nov 2022 00:02:06 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33369
Keep-Alive: timeout=2, max=100
Content-Type: text/javascript
televipo.site/co/fortune/nl/spin_prize2.png
404 Not Found 196 B URL HTTP/1.1 televipo.site/co/fortune/nl/spin_prize2.png
IP
ASN #212531 UAB Interneto vizija
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /co/fortune/nl/spin_prize2.png HTTP/1.1
Host: televipo.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 404 Not Found
Date: Thu, 10 Nov 2022 00:02:07 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
televipo.site/co/fortune/nl/images/ip7.png
200 OK 58 kB URL HTTP/1.1 televipo.site/co/fortune/nl/images/ip7.png
IP
ASN #212531 UAB Interneto vizija
File type PNG image data, 200 x 205, 8-bit/color RGBA, non-interlaced\012- data
Hash d0f24523749ae712be55bbd1156c8912
2fe99223257db03a4ef8ef1260f4bae3ceb60dda
859515bd032db0ca5e82784387c320814718a5f69132ba8b536ceabeaf0eecbf
GET /co/fortune/nl/images/ip7.png HTTP/1.1
Host: televipo.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 00:02:06 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 02 Nov 2022 08:45:29 GMT
ETag: "e115-5ec78dcdab5f7"
Accept-Ranges: bytes
Content-Length: 57621
Cache-Control: max-age=604800
Expires: Thu, 17 Nov 2022 00:02:06 GMT
Keep-Alive: timeout=2, max=100
Content-Type: image/png
televipo.site/co/fortune/nl/images/spin3.png
200 OK 68 kB URL HTTP/1.1 televipo.site/co/fortune/nl/images/spin3.png
IP
ASN #212531 UAB Interneto vizija
File type PNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced\012- data
Hash 02babe9562791abb1bc07d0567036418
5a3eb13854989b27b18e77a9b4f7660856875f63
c85e6d91fcb539943f5acb685556013d9126a85e47f18ca390e44737bec58e51
GET /co/fortune/nl/images/spin3.png HTTP/1.1
Host: televipo.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 00:02:06 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 02 Nov 2022 08:45:29 GMT
ETag: "1083b-5ec78dcdb8117"
Accept-Ranges: bytes
Content-Length: 67643
Cache-Control: max-age=604800
Expires: Thu, 17 Nov 2022 00:02:06 GMT
Keep-Alive: timeout=2, max=100
Content-Type: image/png
televipo.site/favicon.ico
404 Not Found 196 B URL HTTP/1.1 televipo.site/favicon.ico
IP
ASN #212531 UAB Interneto vizija
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /favicon.ico HTTP/1.1
Host: televipo.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://televipo.site/co/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjY4MDM4NTEwIiwiaGFzaCI6IjZlOWYxZmM3OTI4ZmMyNTM2NDAyN2Q5ODM1YmNhYjljMTY5ZjcxZDMifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=03677f3f-b0b8-4c6b-a57e-81d3b6bd331f..l=676087d3-a1d9-42ba-84ae-662aaf046713..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 404 Not Found
Date: Thu, 10 Nov 2022 00:02:07 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.digicert.com/
200 OK 471 B IP
Hash c59d06092401e375df491b06ee8e6dbc
2e27b8ff7c08a5349e27969bc2a08e5e19d0c1da
23ee4ab633fcf67dc5d4d1931450e365cec8d436ef1f9ba5f46b6bab974724c4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1726
Cache-Control: max-age=120808
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 00:02:07 GMT
Etag: "636b6da9-1d7"
Expires: Fri, 11 Nov 2022 09:35:35 GMT
Last-Modified: Wed, 09 Nov 2022 09:06:49 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: P/GkVUDxLV8A8KnFC/UrBQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fDm7IJuXymtQXPvW3rvzUf7KwO0=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6629
Expires: Thu, 10 Nov 2022 01:52:38 GMT
Date: Thu, 10 Nov 2022 00:02:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6629
Expires: Thu, 10 Nov 2022 01:52:38 GMT
Date: Thu, 10 Nov 2022 00:02:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6629
Expires: Thu, 10 Nov 2022 01:52:38 GMT
Date: Thu, 10 Nov 2022 00:02:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b6e55fb9c16b8ec503ca6fb935f650f
1e392159765235158a218248677dc21c46bc4f42
89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6629
Expires: Thu, 10 Nov 2022 01:52:38 GMT
Date: Thu, 10 Nov 2022 00:02:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F571618d6-4a7c-4655-9a3f-1a43863258d2.webp
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F571618d6-4a7c-4655-9a3f-1a43863258d2.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ce8780a7be7c6df77fe53398560075f
7392dfd49233a2653b99feed8b73a8deea709d24
e6d97c56796c69609430d9e1d802fd8b1169e3fceb749d034aa827fda30383a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F571618d6-4a7c-4655-9a3f-1a43863258d2.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5209
x-amzn-requestid: 065bcafb-c718-4313-a11e-86c96f43fb88
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWmCeF3gIAMFSsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1d42-16886ef54cf2da932a8cefad;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:36:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -fb11i9f64lRjQC9zVcwaPKYp1e3IevIt4pPAk1LDts9o0vwVrbvpQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 22:02:51 GMT
age: 7158
etag: "7392dfd49233a2653b99feed8b73a8deea709d24"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca824564-f412-4dc2-b493-0624bc480eed.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca824564-f412-4dc2-b493-0624bc480eed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c390c15d10148f43af21450af434cc7
ef3011cd851559ba8ee39b4bd0dc0af7a25bc651
d76ceb9b671f98d0bbaa47544883108274d4a26c11840f628e7466b23ca541c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca824564-f412-4dc2-b493-0624bc480eed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7696
x-amzn-requestid: e0cf148f-08b1-4399-b07c-5519d852c486
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWmHfFepIAMFebw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1d62-57d6f0964bceb9711a56cfb7;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:36:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Q332Vdi1jyNfDnwszgERBrjmfPxvvz-EnsLImaK_W7-FdZUlbZw0nA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:55:41 GMT
age: 7588
etag: "ef3011cd851559ba8ee39b4bd0dc0af7a25bc651"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b66f592-618a-4463-834d-ff9bbe8866ae.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b66f592-618a-4463-834d-ff9bbe8866ae.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 848af62ec10d0c297922f8600b6ad12d
4eadbf5f0dade92dcc6d68c8ebb70898aadb9a7d
a3b4eb6768259876819d7e6c7ac9e21c603d54f60bf70ed077cb820711e2ae74
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b66f592-618a-4463-834d-ff9bbe8866ae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11316
x-amzn-requestid: 8456b25a-b87f-490d-86b3-fb217afea082
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlniESaIAMF3Qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1c96-30ed3b0972418bae4700edc8;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: paNICiysr9pIOxtqOqjnIOValYbM8InQZ9SmEOUIJirFQd03IN6eRw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:43:10 GMT
age: 8339
etag: "4eadbf5f0dade92dcc6d68c8ebb70898aadb9a7d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F209aa2c7-5455-4bcc-a570-020a64d657cc.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F209aa2c7-5455-4bcc-a570-020a64d657cc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 899d03c61f3b79a2176e6cdbaa7441f0
afc8ee4a5b899e95c4b229d48494ae058bfa4c33
62b52d966cd4216513a0c0cc12f9faa9c2fbb0d4707a458c247047c455b2b6e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F209aa2c7-5455-4bcc-a570-020a64d657cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10006
x-amzn-requestid: 322dbafd-30b5-43b5-a077-aa729ffbc91f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWl_1EKfoAMFS6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1d31-242c7c5c5f670e7332c2fa36;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XzhwtvrTl7H_zSjppLfNv74vQAnuzDBupbcVWrgbR0Y1w4yWWh4KCg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:56:35 GMT
age: 7534
etag: "afc8ee4a5b899e95c4b229d48494ae058bfa4c33"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1301540a-8618-4725-97e7-ac03773f7ed0.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1301540a-8618-4725-97e7-ac03773f7ed0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a929256680885031f55121c35d626bcc
9caf2466f70995d5763b970f916c4944b364a4ff
9366db1c171fe9dae5946198415c9a02005a432fccd359896f94bce874c91027
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1301540a-8618-4725-97e7-ac03773f7ed0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9283
x-amzn-requestid: c800cccd-80cc-4cd6-8856-66cfd07141c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWmC2HnpIAMF3kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1d45-686eac2b6c65b8dd41dfb44a;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2SqQjq27y6Vrwzl9a_ho6sOPImE7Fpbyxie8_fuPGa6bf8fn-yX0Jw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 22:13:45 GMT
age: 6504
etag: "9caf2466f70995d5763b970f916c4944b364a4ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c73f10e-9c01-44bd-95d2-c18ba845fe07.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c73f10e-9c01-44bd-95d2-c18ba845fe07.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2917b487c605eb7f53d20ff3b4fbfef0
5dd8989fb1129638361c16ad2a1fde93a4c4aafd
aaf620d791f23829e15a454b3faf5b47a0f00ff37ada91d6de5c62c322fe90ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c73f10e-9c01-44bd-95d2-c18ba845fe07.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8875
x-amzn-requestid: 1374243f-4fd8-4405-8f8a-946a8f92c457
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlniEw2oAMFtfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1c96-195c58a826eae13b58d21aa0;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: NPKM_A-uSrNtoT6ScKmBXTdMNsunt3d6UAWSzhLPsSPewThG_a0N8Q==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:43:10 GMT
age: 8339
etag: "5dd8989fb1129638361c16ad2a1fde93a4c4aafd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
deehalig.net/pfe/current/micro.tag.min.js?z=5225827&sw=/sw-check-permissions-f820d.js
200 OK 27 kB URL HTTP/1.1 deehalig.net/pfe/current/micro.tag.min.js?z=5225827&sw=/sw-check-permissions-f820d.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash bb980d3e4fce6e45e799fea7b20c1780
f47d9f3f6398c76faa33f23af8e1c0db7a1d9263
8e3c68b99f1e7789e4fc08af12cbd3594f14dda8213f9a683df8d9513f585075
Analyzer Verdict Alert quad9 Sinkholed
GET /pfe/current/micro.tag.min.js?z=5225827&sw=/sw-check-permissions-f820d.js HTTP/1.1
Host: deehalig.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://televipo.site/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 10 Nov 2022 00:02:11 GMT
Content-Type: application/javascript
Last-Modified: Tue, 08 Nov 2022 14:20:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"636a65b7-12fca"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
79.98.25.23
23.36.77.32
93.184.220.29
34.160.144.191