r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2481
Expires: Sun, 11 Dec 2022 04:07:42 GMT
Date: Sun, 11 Dec 2022 03:26:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 430f1651125c14bfa4924aa1f1a392e9
304141c5fe7ac8b370a67912b2592f9622de9600
315d77a9956f34b1615e38f5f1971dd05146980f8a36b35a8108d47ebba7e8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "315D77A9956F34B1615E38F5F1971DD05146980F8A36B35A8108D47EBBA7E8E5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12963
Expires: Sun, 11 Dec 2022 07:02:24 GMT
Date: Sun, 11 Dec 2022 03:26:21 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 11 Dec 2022 03:08:29 GMT
content-type: application/json
age: 1072
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3387
Expires: Sun, 11 Dec 2022 04:22:48 GMT
Date: Sun, 11 Dec 2022 03:26:21 GMT
Connection: keep-alive
20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
20.107.221.64200 OK 607 kB URL HTTP/1.1 20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1059)
Size 607 kB (607198 bytes)
Hash ecbb4a98a3412d6f92f51f3ce124a565
52165c1dff9b7e9342b8b46674aa90f8dcc8f89b
6cf574c70c8f85ae21bdf44d15b8a113ed43e0da9e89feec4130593cead56f19
Analyzer Verdict Alert quad9 Sinkholed
GET /login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
X-Powered-By: PHP/8.1.6
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 5YoUDUKnt8mNrNmfkU8NZsyOZV5AOTUUQLZ5E5cp9JG4lnxImiAR/0Mmk8rgcspNVrOS5reqp1E=
x-amz-request-id: KE6GES758SBJEGGW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 11 Dec 2022 02:49:02 GMT
age: 2239
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
20.107.221.64/arq/jquery.min.js.download
20.107.221.64200 OK 90 kB URL HTTP/1.1 20.107.221.64/arq/jquery.min.js.download
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
Analyzer Verdict Alert quad9 Sinkholed
GET /arq/jquery.min.js.download HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Last-Modified: Thu, 09 Dec 2021 01:58:50 GMT
ETag: "15d84-5d2acf2a9f674"
Accept-Ranges: bytes
Content-Length: 89476
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Dec 2022 03:26:21 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
20.107.221.64/arq/jquery.mask.js.download
20.107.221.64200 OK 19 kB URL HTTP/1.1 20.107.221.64/arq/jquery.mask.js.download
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 5168fd9eb290cc8bec95b43f2e7fbb41
d7ec58487f4b7e4f99ccc8b4d940329425f70d4a
c09329c4b8061b598febdf389cff6e16afc18e8674b0f583a70b4fe924a6d2fd
Analyzer Verdict Alert quad9 Sinkholed
GET /arq/jquery.mask.js.download HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Last-Modified: Thu, 09 Dec 2021 01:58:51 GMT
ETag: "4b19-5d2acf2ae41de"
Accept-Ranges: bytes
Content-Length: 19225
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
20.107.221.64/cartoes-renner/fonts/Roboto-Regular.woff2
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Regular.woff2
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Regular.woff2 HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/cartoes-renner/fonts/Roboto-Bold.woff2
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Bold.woff2
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Bold.woff2 HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/arq/saved_resource.html
20.107.221.64200 OK 149 B URL HTTP/1.1 20.107.221.64/arq/saved_resource.html
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3c2ccda97c47ede0b1c91b11efd575ea
0a348c4b61c961aba7618f909beb87f740a81983
97f9b10039b05e1af4a3c9b778fc72ba44cf68a376e4ec1d55f2558f16cf3e50
Analyzer Verdict Alert quad9 Sinkholed
GET /arq/saved_resource.html HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Last-Modified: Thu, 09 Dec 2021 01:58:53 GMT
ETag: "95-5d2acf2d2f753"
Accept-Ranges: bytes
Content-Length: 149
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html
20.107.221.64/cartoes-renner/fonts/Roboto-Regular.woff
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Regular.woff
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Regular.woff HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/cartoes-renner/fonts/Roboto-Bold.woff
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Bold.woff
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Bold.woff HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/arq/anchor.html
20.107.221.64200 OK 43 kB URL HTTP/1.1 20.107.221.64/arq/anchor.html
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32966)
Hash 6cc85e5f15546e2cd24fcdbd0d506ea7
70b9f756744793900df5e876536e65bf3ff6fa0a
5ef3407097622bc269b3e6f8274cd369935a46be2499b7f3da67c48cc8fa84f2
Analyzer Verdict Alert quad9 Sinkholed
GET /arq/anchor.html HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Last-Modified: Thu, 09 Dec 2021 01:58:53 GMT
ETag: "a690-5d2acf2d306e8"
Accept-Ranges: bytes
Content-Length: 42640
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
20.107.221.64/cartoes-renner/fonts/Roboto-Black.woff2
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Black.woff2
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Black.woff2 HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/cartoes-renner/fonts/Roboto-Light.woff2
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Light.woff2
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Light.woff2 HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/arq/styles__ltr.css
20.107.221.64200 OK 53 kB URL HTTP/1.1 20.107.221.64/arq/styles__ltr.css
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (53002), with no line terminators
Hash 471419a01e0548d10aa7378f96f659c9
121f07529aeebc2207f890a11f512131a5b2f3de
295426f89c923624640e8f1bb52e3438a7b43fb7efa84c1dc6bbbd41971c0f10
Analyzer Verdict Alert quad9 Sinkholed
GET /arq/styles__ltr.css HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/arq/anchor.html
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Last-Modified: Thu, 09 Dec 2021 01:58:51 GMT
ETag: "cf0a-5d2acf2b7d3f0"
Accept-Ranges: bytes
Content-Length: 53002
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
20.107.221.64/cartoes-renner/fonts/Roboto-Regular.ttf
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Regular.ttf
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Regular.ttf HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/cartoes-renner/fonts/Roboto-Black.woff
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Black.woff
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Black.woff HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/cartoes-renner/fonts/Roboto-Bold.ttf
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Bold.ttf
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Bold.ttf HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/cartoes-renner/fonts/Roboto-Light.woff
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Light.woff
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Light.woff HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/cartoes-renner/fonts/Roboto-Black.ttf
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Black.ttf
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Black.ttf HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/cartoes-renner/fonts/Roboto-Light.ttf
20.107.221.64404 Not Found 299 B URL HTTP/1.1 20.107.221.64/cartoes-renner/fonts/Roboto-Light.ttf
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash da525b85ab2e7c2b360a107750c30281
26d615acc95455d053517e7a78374f4496b9aed6
7962d923832052ff24c3422fb80526e3dc9a8de86f14c27ac255968d9e5b991c
Analyzer Verdict Alert quad9 Sinkholed
GET /cartoes-renner/fonts/Roboto-Light.ttf HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/login.php?mobile=iPad=&ip=54.242.218.111&key=IMxYOIgSIqfAIQWztSacwOScdEmfrtQXtvTLvXVVEBVRuyNRIgmbldNcMbPL
HTTP/1.1 404 Not Found
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Content-Length: 299
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
20.107.221.64/arq/recaptcha__pt_br.js.download
20.107.221.64200 OK 354 kB URL HTTP/1.1 20.107.221.64/arq/recaptcha__pt_br.js.download
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (669)
Size 354 kB (353502 bytes)
Hash 635ef51cf700c5b72ccc3d705ea6798e
3844754ed7ae5b5eacf247c05e2d1dc857e0bf88
b3be9c91a4ab7f6298b119b1ff7ad7b89256dc42af4ac0681d0b76ed456d0646
Analyzer Verdict Alert quad9 Sinkholed
GET /arq/recaptcha__pt_br.js.download HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/arq/anchor.html
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:17 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Last-Modified: Thu, 09 Dec 2021 01:58:53 GMT
ETag: "564de-5d2acf2d2c892"
Accept-Ranges: bytes
Content-Length: 353502
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 11 Dec 2022 02:33:15 GMT
age: 3186
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
20.107.221.64/arq/saved_resource(1).html
20.107.221.64200 OK 149 B URL HTTP/1.1 20.107.221.64/arq/saved_resource(1).html
IP 20.107.221.64:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3c2ccda97c47ede0b1c91b11efd575ea
0a348c4b61c961aba7618f909beb87f740a81983
97f9b10039b05e1af4a3c9b778fc72ba44cf68a376e4ec1d55f2558f16cf3e50
Analyzer Verdict Alert quad9 Sinkholed
GET /arq/saved_resource(1).html HTTP/1.1
Host: 20.107.221.64
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://20.107.221.64/arq/anchor.html
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:18 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Last-Modified: Thu, 09 Dec 2021 01:58:53 GMT
ETag: "95-5d2acf2d4e9fd"
Accept-Ranges: bytes
Content-Length: 149
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 44d4574b46375a2d215ae74bc5eae610
5257ed3edeb56231a9bee921671bb2e0c566000e
923454b28e4fa10085df809768a75c2d9f58f104afa016c06ccca7a26479073b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3233
Cache-Control: max-age=110061
Content-Type: application/ocsp-response
Date: Sun, 11 Dec 2022 03:26:22 GMT
Etag: "63944c2a-1d7"
Expires: Mon, 12 Dec 2022 10:00:43 GMT
Last-Modified: Sat, 10 Dec 2022 09:06:50 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
34.216.88.5101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.216.88.5:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UghMlv7Nzq4qojUL5BeRpA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YJOx43h2QD/FIfvW3l8EpG68RTo=
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 536e64e7cdf4612cec94daaa0464b12f
1e2d697043a9df2ec5defde0250aeea30afbab67
02f0596415561b3cec570803ae1a7fabb726d9f041381ff6f7bd00e9ac61b602
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:22 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 00:18:11 GMT
Expires: Sat, 17 Dec 2022 00:18:10 GMT
Etag: "1e2d697043a9df2ec5defde0250aeea30afbab67"
Cache-Control: max-age=506507,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 777b1e4e4b54b524-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 536e64e7cdf4612cec94daaa0464b12f
1e2d697043a9df2ec5defde0250aeea30afbab67
02f0596415561b3cec570803ae1a7fabb726d9f041381ff6f7bd00e9ac61b602
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:22 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 10 Dec 2022 00:18:11 GMT
Expires: Sat, 17 Dec 2022 00:18:10 GMT
Etag: "1e2d697043a9df2ec5defde0250aeea30afbab67"
Cache-Control: max-age=506507,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 777b1e4e7c53b4f3-OSL
www.realizesolucoesfinanceiras.com.br/cartoes-renner/images/lojas-renner.png
200.248.113.245200 OK 2.3 kB URL HTTP/1.1 www.realizesolucoesfinanceiras.com.br/cartoes-renner/images/lojas-renner.png
IP 200.248.113.245:0
File type PNG image data, 144 x 144, 8-bit colormap, non-interlaced\012- data
Hash aae25186b5f067293cc5cc142e32bfbc
8d838f717612b7da9dc1820f6b011b1be5e164cd
333b79e3255f87518333bb92c2c0effca7a176e24810fc3e9cef5d4f359321e8
GET /cartoes-renner/images/lojas-renner.png HTTP/1.1
Host: www.realizesolucoesfinanceiras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://20.107.221.64/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:22 GMT
Content-Type: image/png
Content-Length: 2288
Last-Modified: Tue, 04 Oct 2022 12:17:43 GMT
Connection: keep-alive
ETag: "633c2467-8f0"
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1838794845"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=16070400; includeSubDomains
X-Frame-Options: deny
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
Set-Cookie: dtCookie=v_4_srv_12_sn_F9F526B5C4996D1AC67CBBBD35ADAF51_perc_100000_ol_0_mul_1_app-3A189e25234ffe70ce_1_rcs-3Acss_0; Path=/; Domain=.realizesolucoesfinanceiras.com.br
LBSessionID=!5Ms4OLCRj+gZGIIwvU4xC4Cc5ENYpQcQByqs2ivWvHvtq9jEa+9zvYyhif3N1+ad5dwoK3FcwQdRsl4=; path=/
TS0129a473=01c0c86495c0981e897dc6c334eb4236c277517224cdd9df0ee953fb92290d30729a1f5c2e109ec43b60d1bc58d4cc286acbb6fd6e; Path=/
TS01fa365e=01c0c86495c0981e897dc6c334eb4236c277517224cdd9df0ee953fb92290d30729a1f5c2e109ec43b60d1bc58d4cc286acbb6fd6e; path=/; domain=.realizesolucoesfinanceiras.com.br
www.realizesolucoesfinanceiras.com.br/cartoes-renner/images/favicon.ico
200.248.113.245200 OK 608 B URL HTTP/1.1 www.realizesolucoesfinanceiras.com.br/cartoes-renner/images/favicon.ico
IP 200.248.113.245:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash a010a9d313731f0186a02b90a247a383
becc216ef6b1cefc2e0928aeade8def982f43190
cd056b6ee5078d2459fcc6e2a5cb2709d3eaba24cf04e7dc2b582ed0a1e1acd4
GET /cartoes-renner/images/favicon.ico HTTP/1.1
Host: www.realizesolucoesfinanceiras.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://20.107.221.64/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 11 Dec 2022 03:26:22 GMT
Content-Type: image/x-icon
Last-Modified: Tue, 04 Oct 2022 12:17:43 GMT
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"633c2467-47e"
Server-Timing: dtSInfo;desc="0", dtRpid;desc="-456985882"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Strict-Transport-Security: max-age=16070400; includeSubDomains
X-Frame-Options: deny
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
Set-Cookie: dtCookie=v_4_srv_11_sn_5DABA8D59BE548BD44F3F4A9451E81C1_perc_100000_ol_0_mul_1_app-3A189e25234ffe70ce_1_rcs-3Acss_0; Path=/; Domain=.realizesolucoesfinanceiras.com.br
LBSessionID=!CfihpZwfvavMi+EwvU4xC4Cc5ENYpQE+ZmjXRtxm+lf63HJhN5C4w7ZA+Q0rJ2uk9UES7WKNgdP/7zw=; path=/
TS0129a473=01c0c864953e9329772dfc43e3835a3ac0088ca7cb858b2ef91b405672b1ed06682d756d95a3492830a3561eeed6c0249c2f037aaf; Path=/
TS01fa365e=01c0c864953e9329772dfc43e3835a3ac0088ca7cb858b2ef91b405672b1ed06682d756d95a3492830a3561eeed6c0249c2f037aaf; path=/; domain=.realizesolucoesfinanceiras.com.br
Transfer-Encoding: chunked
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20428
Expires: Sun, 11 Dec 2022 09:06:51 GMT
Date: Sun, 11 Dec 2022 03:26:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20428
Expires: Sun, 11 Dec 2022 09:06:51 GMT
Date: Sun, 11 Dec 2022 03:26:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20428
Expires: Sun, 11 Dec 2022 09:06:51 GMT
Date: Sun, 11 Dec 2022 03:26:23 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20428
Expires: Sun, 11 Dec 2022 09:06:51 GMT
Date: Sun, 11 Dec 2022 03:26:23 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2020df3404a4b7c3e142af4a1330b848
2fe69b52fe03128e86550bf08474ecac82682384
37a52c158d5cfdf3589e19163cf446c02ce1466f444656080b02da82d2bcefae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6311
x-amzn-requestid: 46ccaee0-bde8-4be6-9dc8-46e3ae356dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c8xUYH10oAMF8Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394fc1b-2440251f06cb950a57489555;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SG-8rL_rUN3MpXHhkAaHmIqKf7mSHtv0kEAkBOAIPcqq755Qh-mc3Q==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Dec 2022 21:52:26 GMT
age: 20037
etag: "2fe69b52fe03128e86550bf08474ecac82682384"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6442de2-4fd8-4da6-915e-0c84574e540c.webp
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6442de2-4fd8-4da6-915e-0c84574e540c.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 911ce18e0af5cc8e260ea1fe52545d36
b275849bb704505af83e87b121c21888948c0926
b7be399d579a8449b4e8472b76f1cf02b576589e9cf0b2991058085df20aaeec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6442de2-4fd8-4da6-915e-0c84574e540c.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9783
x-amzn-requestid: 17fb47d7-c1e1-4a38-902f-02ca87148280
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c7VqEGUXIAMFfSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63946973-777ee2d97f140b53639ade83;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 11:11:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P28-O5QdegjUdLR0HfC1E3XtcOxR3XK8RezT6yykfrPmNnPHb3dFMQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Dec 2022 23:06:33 GMT
age: 15590
etag: "b275849bb704505af83e87b121c21888948c0926"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45e0c1638ad919bde19731f7987ab064
1e492807c665e6e6b24ec6ce19035fdfc6f23b92
f0d3738ec8406958470c8fd152a02a123d7654c30f974c1df5c4977a380c2d62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10205
x-amzn-requestid: daca166e-fa82-4491-9065-a4629141fd11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c4OQAGLyoAMFQgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63932a66-0551e77243e4a6472b377f9d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 12:30:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: miR7RxPy5ldYudl8lYXWkth-_liryMFY7aZsvNC4mDVtf13qJg0NZA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 00:46:21 GMT
age: 9602
etag: "1e492807c665e6e6b24ec6ce19035fdfc6f23b92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9d9597d-3342-4cae-86ab-08af1be49d2c.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9d9597d-3342-4cae-86ab-08af1be49d2c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ecae80fc01e2d8953c298991500e07b
b71103793717d4c7fddfc6fe07b936b87fe3f5e1
bbd70dbf8c7976674cce6217b9274baf49d91a53196b6c907e9636b9462417eb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9d9597d-3342-4cae-86ab-08af1be49d2c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9732
x-amzn-requestid: 5f54b91c-702a-4a07-80eb-5df7456f3487
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUncHT4oAMFt1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e67c9-38ca2ecb4934ea6439acc2af;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:51:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: v5XmAXlXJFSTNDoqENq3PKd-stbUzBE4QqJHhzcZCcusNRI56v7z_w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Dec 2022 10:35:15 GMT
age: 60668
etag: "b71103793717d4c7fddfc6fe07b936b87fe3f5e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa890f071-ec5c-4223-9724-f63b2c9a73f3.jpeg
34.120.237.76200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa890f071-ec5c-4223-9724-f63b2c9a73f3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash afb336b3180aa4e95a887d41561bf2b6
f26da3ddd126b938bf330e9f1a0f4adfd991fb99
d540eea94d006728d68801a8914490e636fc96ec104fe5bdfa0833aa51e3488f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa890f071-ec5c-4223-9724-f63b2c9a73f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4565
x-amzn-requestid: cf7eba9f-35f6-456e-b4ea-1d667a006291
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgZgeHeuIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389a2cf-58c886a627064bb4346cbd3f;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 07:01:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P-x8SX5tC03rmpXqfIdOXJWc06Jg_Kd7ve955Z0P8eMwct_beLDXOQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 03:14:05 GMT
age: 738
etag: "f26da3ddd126b938bf330e9f1a0f4adfd991fb99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35586156-4c0f-4b7e-ade1-0373a473ecf2.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35586156-4c0f-4b7e-ade1-0373a473ecf2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea3f48d55264e9000260f9076b1465de
f62e2445a3eecc698562b792c613de74fb77921a
2bc725ab7a45e573a10cf53050ecd79900eba2db14eb93fe4d206e4d7a7d4323
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35586156-4c0f-4b7e-ade1-0373a473ecf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5854
x-amzn-requestid: 7b3b62e6-5020-466e-bd54-1b47310a0d4d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cqSx9GvcIAMFgOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d980c-1adbfa026e755c5126c8cb7c;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 07:04:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Jft0igygSrxZDwMs1580Q3Tq80ga6HCyDoNQ6pdU-QGSHfeKiYkMVg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Dec 2022 12:52:33 GMT
age: 52430
etag: "f62e2445a3eecc698562b792c613de74fb77921a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2