hlstatsx.bierwiese-community.de/
5.9.157.218301 Moved Permanently 330 B URL HTTP/1.1 hlstatsx.bierwiese-community.de/
IP 5.9.157.218:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5836210357089561e1e2e93c8dbc953b
fd554e20ef8fe3d688d5d4a9aecd9a5555ba528c
7a0cfccdf6a37a25844e5bf7e50c291b1d21fc03dd04d84c6295f436a094c29b
GET / HTTP/1.1
Host: hlstatsx.bierwiese-community.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 22 Nov 2022 04:11:00 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 330
Connection: keep-alive
Location: http://94.249.194.218/hlstats/hlstats.php
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6149
Expires: Tue, 22 Nov 2022 05:53:29 GMT
Date: Tue, 22 Nov 2022 04:11:00 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4843de3bf95411e6aa89834def44bb86
1f1882351ac63fba73a22014382f69df5e02ec96
1e6ed1df02f8fa6c89ddca66f7c9981f8a06127d7ec90b503703137e823bb4b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6258
Cache-Control: max-age=115475
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:11:00 GMT
Etag: "637b5375-1d7"
Expires: Wed, 23 Nov 2022 12:15:35 GMT
Last-Modified: Mon, 21 Nov 2022 10:31:17 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8a6c553d89cb6fd1de4787fee2a0e0dc
b974e022ea8675c0a09f58864cc99df05b5b1241
a62ecedcb0953814f982237818a3d902fdca501f82b675629d28b5d476e0fbfa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A62ECEDCB0953814F982237818A3D902FDCA501F82B675629D28B5D476E0FBFA"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5802
Expires: Tue, 22 Nov 2022 05:47:42 GMT
Date: Tue, 22 Nov 2022 04:11:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 22 Nov 2022 04:09:18 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 102
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: WHIBGr8nn93xeI6vO7g28xTpNN0f49/gXc/cpeFv2wiz1Avbvy7orU+dscLmPdgDvBfka8uoO2w=
x-amz-request-id: 8WCM27Q93HSJABSG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 22 Nov 2022 03:39:24 GMT
age: 1896
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
94.249.194.218/hlstats/hlstats.php
94.249.194.218200 OK 2.3 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstats.php
IP 94.249.194.218:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (319)
Hash c44ec405b47e6bfbfc9b8a8a9b737680
8df1e2537ca2ea521df1b51619b96a26d9c31dd5
8e0240e661b00dc38501e7773c9dd700301918a0f3e99d8ac70de2b6fb9e9ffa
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstats.php HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; path=/
ELstatsNEO_Visit=1; expires=Tue, 22-Nov-2022 04:16:00 GMT; Max-Age=300; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2296
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 04:11:00 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
94.249.194.218/hlstats/hlstats.css
94.249.194.218200 OK 596 B URL HTTP/1.1 94.249.194.218/hlstats/hlstats.css
IP 94.249.194.218:0
Hash e86104a554b202d4820f32aeca8e4849
07dc47b1bc6ee0e1c292f96134ad54f7570aa37a
b43f2c0360393ddf19e2401bad701cd0db5ca126835f90d3bbda7144f4f9c162
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstats.css HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Wed, 15 Oct 2014 00:24:54 GMT
ETag: "51d-5056b292ce180-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 596
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
94.249.194.218/hlstats/styles/sourcebans.css
94.249.194.218200 OK 1.6 kB URL HTTP/1.1 94.249.194.218/hlstats/styles/sourcebans.css
IP 94.249.194.218:0
File type ASCII text, with CRLF line terminators
Hash d0d19c971eb620c0614aa185d1f2852a
b2015b5408a4200f49575ff5d641ff3f017fb821
5341f8137a5bac915bd4f194dd14dbb65dd102d961f6d32e27376e5bec00e330
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/styles/sourcebans.css HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:50 GMT
ETag: "1a59-4fcf757fa8480-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1594
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
94.249.194.218/hlstats/css/SqueezeBox.css
94.249.194.218200 OK 809 B URL HTTP/1.1 94.249.194.218/hlstats/css/SqueezeBox.css
IP 94.249.194.218:0
File type ASCII text, with CRLF line terminators
Hash 0e6be0736fc5aa1ee64c0e9d092fbfa3
be7e0bd9b1502d74edc05da5d7c324c89b1a1dca
bd27e44507aa61d8dcb2de3cb6ccfd4754e3fb79fad58ce8a7ab09fa3eadc028
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/css/SqueezeBox.css HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:42 GMT
ETag: "9b4-4fcf757807280-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 809
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
94.249.194.218/hlstats/includes/js/SqueezeBox.js
94.249.194.218200 OK 3.7 kB URL HTTP/1.1 94.249.194.218/hlstats/includes/js/SqueezeBox.js
IP 94.249.194.218:0
File type ASCII text, with CRLF line terminators
Hash f835d6ebbe22f89deef2a069da4c9d88
b8940654bfeebbb0843ceda6b7d7768a8f1d909e
0ca22d091c08d14354d5bec94d327d55b10dc7bd26e496ec4628153a37c718bf
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/includes/js/SqueezeBox.js HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:48 GMT
ETag: "318e-4fcf757dc0000-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3720
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
94.249.194.218/hlstats/includes/js/tabs.js
94.249.194.218200 OK 1.2 kB URL HTTP/1.1 94.249.194.218/hlstats/includes/js/tabs.js
IP 94.249.194.218:0
File type ASCII text, with CRLF line terminators
Hash 6b41cad1dcc21e8c05ff8831656df738
bda96e37acb045c2f26764fd1114c1fbe181dbf5
bb32df991fbd5ef64467f1d5c6b122fb7a690fe352e126da2d71b9b8fe18efaf
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/includes/js/tabs.js HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:48 GMT
ETag: "c2d-4fcf757dc0000-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1221
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
94.249.194.218/hlstats/includes/js/heatmap.js
94.249.194.218200 OK 181 B URL HTTP/1.1 94.249.194.218/hlstats/includes/js/heatmap.js
IP 94.249.194.218:0
File type ASCII text, with CRLF line terminators
Hash dd10f3332c32e897c5ed40b2b9c2919c
26d27839511400f7e1b5fc8a3a7c833f83cb7080
15c3c802b54c2175b394c382d8533ec1622a852d36c5a939a62b68a5d4f4f2c7
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/includes/js/heatmap.js HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:48 GMT
ETag: "d2-4fcf757dc0000-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 181
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
94.249.194.218/hlstats/includes/js/mootools.js
94.249.194.218200 OK 21 kB URL HTTP/1.1 94.249.194.218/hlstats/includes/js/mootools.js
IP 94.249.194.218:0
File type ASCII text, with very long lines (65375), with CRLF line terminators
Hash 7810a4f06f83be3e2c96648dc6d50f2e
a251bcff4bb8f268d8b1b1bc0b5fe4d52d050e8f
bda8c20436b59f3a4da16d115842862955561b38ffc3c01e7f3a5fcbd75bce97
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/includes/js/mootools.js HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:48 GMT
ETag: "10553-4fcf757dc0000-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20850
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
94.249.194.218/hlstats/hlstatsimg/games/css_off/game.png
94.249.194.218200 OK 1.1 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/games/css_off/game.png
IP 94.249.194.218:0
File type PNG image data, 24 x 21, 8-bit colormap, non-interlaced\012- data
Hash 47ef6aa08c9afef522066f707262b91f
0cfc20c990a20661f13a514be135b16de9418e0e
c5b4110cc15326cf572f2a72f025a3b6bdaa7bc58a0ba85510ebd0a51ae380cd
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/games/css_off/game.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Mon, 07 Sep 2020 13:40:07 GMT
ETag: "425-5aeb95b4ee88e"
Accept-Ranges: bytes
Content-Length: 1061
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/hlstatsimg/downarrow.gif
94.249.194.218200 OK 826 B URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/downarrow.gif
IP 94.249.194.218:0
File type GIF image data, version 89a, 9 x 6\012- data
Hash f5878e903dea67c973b1eff4271aea17
c722ef0e70b55dbd9be93b16f0de5702bb3a5187
74a4d0a034c45907bab5618ed99dd064c6516349cdc32234cb23be75c45f20a4
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/downarrow.gif HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:42 GMT
ETag: "33a-4fcf757807280"
Accept-Ranges: bytes
Content-Length: 826
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif
94.249.194.218/hlstats/hlstatsimg/footer-small.png
94.249.194.218200 OK 3.8 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/footer-small.png
IP 94.249.194.218:0
File type PNG image data, 120 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash a78e6a94854c926df0289e0d7986cd4e
6e4e0ab3fb02112904c57537abd4764f4b4215bb
fed370bbbf0721d4336b8149ae8752ed557bc4865d12592d086e2c1f7feadb16
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/footer-small.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:42 GMT
ETag: "ed3-4fcf757807280"
Accept-Ranges: bytes
Content-Length: 3795
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/hlstatsimg/player.gif
94.249.194.218200 OK 289 B URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/player.gif
IP 94.249.194.218:0
File type GIF image data, version 89a, 16 x 16\012- data
Hash 4876c00ce5b2605ad8a7906b1f3c26c7
07bc9631c9dac9ec1e5dc461b79e6a6d9e2a9091
892fa4bf3dccfe4e177f4c5d5463813ce486bc6a44f09764357198561a491b34
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/player.gif HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:48 GMT
ETag: "121-4fcf757dc0000"
Accept-Ranges: bytes
Content-Length: 289
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/gif
94.249.194.218/hlstats/hlstatsimg/icons/sourcebans/title-help.png
94.249.194.218200 OK 1.2 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/icons/sourcebans/title-help.png
IP 94.249.194.218:0
File type PNG image data, 62 x 18, 8-bit colormap, non-interlaced\012- data
Hash 6df4e87666ef66301f017389eefa5c0d
d59750ac95b407e5aedafcfa44e60f2f3c4920ff
43b23b3f493032d3f2bc733d7dd276b61806fa654c4b0ce895ccf63db2dd8025
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/icons/sourcebans/title-help.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:48 GMT
ETag: "490-4fcf757dc0000"
Accept-Ranges: bytes
Content-Length: 1168
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/hlstatsimg/games/dust2/game.png
94.249.194.218200 OK 1.1 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/games/dust2/game.png
IP 94.249.194.218:0
File type PNG image data, 24 x 21, 8-bit colormap, non-interlaced\012- data
Hash 47ef6aa08c9afef522066f707262b91f
0cfc20c990a20661f13a514be135b16de9418e0e
c5b4110cc15326cf572f2a72f025a3b6bdaa7bc58a0ba85510ebd0a51ae380cd
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/games/dust2/game.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Mon, 07 Sep 2020 15:23:10 GMT
ETag: "425-5aebacbd357d5"
Accept-Ranges: bytes
Content-Length: 1061
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/hlstatsimg/games/ass1/game.png
94.249.194.218200 OK 1.1 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/games/ass1/game.png
IP 94.249.194.218:0
File type PNG image data, 24 x 21, 8-bit colormap, non-interlaced\012- data
Hash 47ef6aa08c9afef522066f707262b91f
0cfc20c990a20661f13a514be135b16de9418e0e
c5b4110cc15326cf572f2a72f025a3b6bdaa7bc58a0ba85510ebd0a51ae380cd
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/games/ass1/game.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 06 Sep 2020 13:24:12 GMT
ETag: "425-5aea50488c969"
Accept-Ranges: bytes
Content-Length: 1061
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/hlstatsimg/games/random/game.png
94.249.194.218200 OK 1.1 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/games/random/game.png
IP 94.249.194.218:0
File type PNG image data, 24 x 21, 8-bit colormap, non-interlaced\012- data
Hash 47ef6aa08c9afef522066f707262b91f
0cfc20c990a20661f13a514be135b16de9418e0e
c5b4110cc15326cf572f2a72f025a3b6bdaa7bc58a0ba85510ebd0a51ae380cd
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/games/random/game.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Mon, 07 Sep 2020 17:14:15 GMT
ETag: "425-5aebc591a0863"
Accept-Ranges: bytes
Content-Length: 1061
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/hlstatsimg/icons/sourcebans/title-contents.png
94.249.194.218200 OK 1.3 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/icons/sourcebans/title-contents.png
IP 94.249.194.218:0
File type PNG image data, 81 x 18, 8-bit colormap, non-interlaced\012- data
Hash 85022c6cbf4bc43c43c973dcc683a69b
862629c71cf5a0978faa5496e2afd2893d20cd48
2028f041ac4399bdf16ae09dd1bb0b3659e4a1095a8e168ff9b977a1ade5e679
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/icons/sourcebans/title-contents.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:48 GMT
ETag: "4e2-4fcf757dc0000"
Accept-Ranges: bytes
Content-Length: 1250
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/hlstatsimg/clan.gif
94.249.194.218200 OK 1.1 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/clan.gif
IP 94.249.194.218:0
File type GIF image data, version 89a, 16 x 16\012- data
Hash 1c29af25d474c283db40d6a68d197e77
fb4b17c59c80ddd05ad2829f10826dcf528fdf54
22c0da735e8a6b602794ff45a4b2d00494e83d9fd511efbd197e0cb4757aaaf1
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/clan.gif HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:42 GMT
ETag: "42c-4fcf757807280"
Accept-Ranges: bytes
Content-Length: 1068
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/gif
94.249.194.218/hlstats/hlstatsimg/icons/sourcebans/title-search.png
94.249.194.218200 OK 1.2 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/icons/sourcebans/title-search.png
IP 94.249.194.218:0
File type PNG image data, 66 x 18, 8-bit colormap, non-interlaced\012- data
Hash 9bec4e0b22862b4484ea255118e3328f
2b4e58b62a796278914822807416528359600016
164b47d4e0aa561f27cf2e0a6ff2c1ad5c95289214758ab019efda51b5f3c7bd
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/icons/sourcebans/title-search.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:48 GMT
ETag: "4bc-4fcf757dc0000"
Accept-Ranges: bytes
Content-Length: 1212
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/hlstatsimg/games/Italy1/game.png
94.249.194.218200 OK 1.1 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/games/Italy1/game.png
IP 94.249.194.218:0
File type PNG image data, 24 x 21, 8-bit colormap, non-interlaced\012- data
Hash 47ef6aa08c9afef522066f707262b91f
0cfc20c990a20661f13a514be135b16de9418e0e
c5b4110cc15326cf572f2a72f025a3b6bdaa7bc58a0ba85510ebd0a51ae380cd
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/games/Italy1/game.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 06 Sep 2020 12:12:11 GMT
ETag: "425-5aea402feffe7"
Accept-Ranges: bytes
Content-Length: 1061
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/hlstats.php
94.249.194.218200 OK 2.1 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstats.php
IP 94.249.194.218:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (319)
Hash ab1be48187325795330f67d3adcd82bb
8b92e67f3df61c2fa78582e2c959acc3fb4fd5a4
5d52c5cea239454e4160e1f9751f9a5c9d97fbad50f6487b7aa0be931f162375
Analyzer Verdict Alert quad9 Sinkholed
POST /hlstats/hlstats.php HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 7
Origin: http://94.249.194.218
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2059
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
94.249.194.218/hlstats/hlstatsimg/icons/sourcebans/title.png
94.249.194.218206 Partial Content 3.1 kB URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/icons/sourcebans/title.png
IP 94.249.194.218:0
Hash 35529670b72b64e1d30b6b4920698a9b
3be29f2ee58272c60ecc215c23704ceaf04cd558
02dd50d62bef5756a567f3e1fb29fe8950064995c8d63bf9cdc0cdf3595274e6
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/icons/sourcebans/title.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
Range: bytes=50393-
If-Range: "d11a-4fcf757dc0000"
HTTP/1.1 206 Partial Content
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:48 GMT
ETag: "d11a-4fcf757dc0000"
Accept-Ranges: bytes
Content-Length: 3137
Content-Range: bytes 50393-53529/53530
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/styles/sourcebans/title-background.png
94.249.194.218200 OK 218 B URL HTTP/1.1 94.249.194.218/hlstats/styles/sourcebans/title-background.png
IP 94.249.194.218:0
File type PNG image data, 1 x 87, 8-bit/color RGB, non-interlaced\012- data
Hash 324969b23bd3f260b52847cbb89865ca
1f9b4b2ece8973b3efa0940a58913971930d04e6
7ae3a919ab9d0bf27e6d06ab837324b052faae59a00b320a9b2d0e0e3ecd70a3
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/styles/sourcebans/title-background.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/styles/sourcebans.css
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:50 GMT
ETag: "da-4fcf757fa8480"
Accept-Ranges: bytes
Content-Length: 218
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/styles/sourcebans/table_location.png
94.249.194.218200 OK 278 B URL HTTP/1.1 94.249.194.218/hlstats/styles/sourcebans/table_location.png
IP 94.249.194.218:0
File type PNG image data, 1 x 22, 4-bit colormap, non-interlaced\012- data
Hash 982e32b24e3c0d2b3714038a349eba16
6579b0ad934e0c7548b90dcda567f4db580e8d6b
7159ab480c74c76c0790d56ef14eac44bd2dfb78d82b25bed26e3f36e0fac63b
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/styles/sourcebans/table_location.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/styles/sourcebans.css
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:50 GMT
ETag: "116-4fcf757fa8480"
Accept-Ranges: bytes
Content-Length: 278
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/styles/sourcebans/location_under.png
94.249.194.218200 OK 280 B URL HTTP/1.1 94.249.194.218/hlstats/styles/sourcebans/location_under.png
IP 94.249.194.218:0
File type PNG image data, 1 x 15, 4-bit colormap, non-interlaced\012- data
Hash 911e5f3fede876c502903528ed31dee7
58a29d2e03f9f3c3a1f2eabb86b6fc392bbfa587
300432f78281f3cea9a114ca11aac9eb69a5d0bc1b03bf2eed559770b05adc83
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/styles/sourcebans/location_under.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/styles/sourcebans.css
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:50 GMT
ETag: "118-4fcf757fa8480"
Accept-Ranges: bytes
Content-Length: 280
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/styles/sourcebans/detail_head.png
94.249.194.218200 OK 710 B URL HTTP/1.1 94.249.194.218/hlstats/styles/sourcebans/detail_head.png
IP 94.249.194.218:0
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash c5fd986bbea4d238d8f158b7646e64dd
b4dc36b8a3a188ee5994279f12cd56d9f741f26f
482916d47851857f87374820f437a215faa2e44c737720dc98da5916eb5587ea
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/styles/sourcebans/detail_head.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/styles/sourcebans.css
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:50 GMT
ETag: "2c6-4fcf757fa8480"
Accept-Ranges: bytes
Content-Length: 710
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
94.249.194.218/hlstats/favicon.ico
94.249.194.218200 OK 1.4 kB URL HTTP/1.1 94.249.194.218/hlstats/favicon.ico
IP 94.249.194.218:0
File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Hash e051039c186b3b866ae8e39b9403ca25
c965fb223e4e55e6e820c6ac67cd1fc28ab9290d
a3a93600747590d926fa97d0eec7026b877d9872c670cfd1ab9d9ce45c806302
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/favicon.ico HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:42 GMT
ETag: "57e-4fcf757807280"
Accept-Ranges: bytes
Content-Length: 1406
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 22 Nov 2022 04:08:53 GMT
cache-control: public,max-age=3600
age: 128
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 2db0ebb9efcf3be3c92f23b61de5c065
dd830565723f18a7944c26d24b0fb142d06a71a5
8615316184c4d1d64db923a5364363bbb3d25e146a042c5fbd5bf0cfcec8effb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3993
Cache-Control: max-age=108146
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 04:11:01 GMT
Etag: "637b3fae-1d7"
Expires: Wed, 23 Nov 2022 10:13:27 GMT
Last-Modified: Mon, 21 Nov 2022 09:06:54 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
52.38.227.80101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.38.227.80:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Q70zvZNGFpyPCx9mSpKy8A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nKolZnou1ryhyiLQWuJX1VOhnPg=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3127
Expires: Tue, 22 Nov 2022 05:03:09 GMT
Date: Tue, 22 Nov 2022 04:11:02 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3127
Expires: Tue, 22 Nov 2022 05:03:09 GMT
Date: Tue, 22 Nov 2022 04:11:02 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3127
Expires: Tue, 22 Nov 2022 05:03:09 GMT
Date: Tue, 22 Nov 2022 04:11:02 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3127
Expires: Tue, 22 Nov 2022 05:03:09 GMT
Date: Tue, 22 Nov 2022 04:11:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ab62c5a7c3296600de924eb0b283bc1
bc4a2dc43898e3fb78ba7301d8b09b280991d221
f2a4c0829a4fb9a585113ed358832d16470ec391035a302a8f3c4666172f02bd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10556
x-amzn-requestid: d2426c6d-5e78-496c-8649-0496a872b380
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-Iq0GPVoAMF9bg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee45-1ee6dc09394731cc4dbfc38a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: sBNLrVAl4G6pJ-OBZ6aJZC64MrkkGQdsuZKITQwcqgYgP6-GJiblfA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:59:20 GMT
age: 22302
etag: "bc4a2dc43898e3fb78ba7301d8b09b280991d221"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 253593d1b3f90aa54d0748688fbb09ac
470c54ca28e1e5c56828c8c7f9849374061f501e
d8d331519f526b1117e4f67b0fb5fb46f400a63d1cb5757a3f22201ea70301ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9598
x-amzn-requestid: a713ce94-2441-4288-b6d8-cd6b638274b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IqVGgJoAMFz5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee41-5ed8e45c664203e137f8c92b;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nFfq7s1220lni0ZvVlfHyEHo9IzXlySilW-uCgLVC1nnjo4jOaHDPw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:34:52 GMT
age: 20170
etag: "470c54ca28e1e5c56828c8c7f9849374061f501e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: s1153EpshSWYGLcN7Zzzs4PgXl9cddZ20gTwh5bK2HOBu4e_PSNCpQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 05:19:29 GMT
age: 82293
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cb92473-220a-4ebb-b8d8-6c17618bc006.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cb92473-220a-4ebb-b8d8-6c17618bc006.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bd62f641e9d58eee10e41db0fa00b5f2
4210e5f150a49d6f6ee26cbb11ded8173ab8cf74
5858451bf7cac97b8881dde7e3197110fa8639c1d94b51934859669c51221e1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cb92473-220a-4ebb-b8d8-6c17618bc006.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4308
x-amzn-requestid: 7db10594-4acc-448d-b724-1c4bc8ec42ca
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrVFtRoAMFTzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee48-0a466f6b0bd48f3532216bca;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lazmS3LWuJDe1SCEMAL2jXKrjjRr4H_hC7kAi7zx9Zx1un1zthsdxQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:48:00 GMT
etag: "4210e5f150a49d6f6ee26cbb11ded8173ab8cf74"
content-type: image/jpeg
age: 22982
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b591bcc9d645eed0ea6ebc5dae07d31
97278cc5c5a1be7926d53fd8daf9e802bfb6cbdb
82dde9a4d139bdfae1d8859f4d7a77f92182c65ad630e25d0cc52f346dd1dfad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11793
x-amzn-requestid: 7edbd95e-83c8-4162-886f-b0bf88deee5f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6oFrQIAMFnYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-4f1317ec61500d713816830d;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: e00mQ1Nvocum0ENKksGnBcQ7gZf1P3R--L7mq2Fvzd5RHbt0W1FGuQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:47:01 GMT
etag: "97278cc5c5a1be7926d53fd8daf9e802bfb6cbdb"
content-type: image/jpeg
age: 23041
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03830e3ff377979c234bf37561c54cfd
c18884ce9370c97e6b4e12ab0f827d68a1938bfa
5ba8bfc69c7eba42de4a16bf6d1e1e3570cd3918fe15cb8b2d25950ef791ddbb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8365
x-amzn-requestid: e6c2ec6e-525e-4b9f-a45d-63076580df5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrpFJ3oAMF4mA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee4a-576f678b6e364bca09532010;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 89jqCw8OJIxusDPoTi5-HDxWcgCfNvRrku2VFBLcQbFJwLLaZBpHGA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:44:46 GMT
age: 23176
etag: "c18884ce9370c97e6b4e12ab0f827d68a1938bfa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
94.249.194.218/hlstats/hlstatsimg/icons/sourcebans/title.png
94.249.194.218200 OK 0 B URL HTTP/1.1 94.249.194.218/hlstats/hlstatsimg/icons/sourcebans/title.png
IP 94.249.194.218:0
Analyzer Verdict Alert quad9 Sinkholed
GET /hlstats/hlstatsimg/icons/sourcebans/title.png HTTP/1.1
Host: 94.249.194.218
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://94.249.194.218/hlstats/hlstats.php
Cookie: PHPSESSID=pcc02mar903dtgjoon6f3s82a5; ELstatsNEO_Visit=1
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 04:11:00 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sun, 29 Jun 2014 10:52:48 GMT
ETag: "d11a-4fcf757dc0000"
Accept-Ranges: bytes
Content-Length: 53530
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png