r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7786cd9bd97e024b3a1d16215defaad2
786ddbb74b0b6bd9270622dbe0258d6caee407c1
9c297ccfd178eec7e472fb64a6b2e34d4c7a6dec32870f49982353e590196ba0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C297CCFD178EEC7E472FB64A6B2E34D4C7A6DEC32870F49982353E590196BA0"
Last-Modified: Mon, 14 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4473
Expires: Mon, 14 Nov 2022 14:24:42 GMT
Date: Mon, 14 Nov 2022 13:10:09 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 832aecaba9f06ee2d39d4d4bea65f13c
7195d6ffadfdbc6fc8e92c63ae28d4a3038a72dc
a437509314a97065de6c7b9e5e2b4b61f0234b45f5f5bf2649cbdf499577bfd3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6370
Cache-Control: max-age=169638
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 13:10:09 GMT
Etag: "637218f5-1d7"
Expires: Wed, 16 Nov 2022 12:17:27 GMT
Last-Modified: Mon, 14 Nov 2022 10:31:17 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 14 Nov 2022 12:44:34 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1535
alt-svc: clear
X-Firefox-Spdy: h2
mindflower.group/
200 OK 68 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7893)
Hash 449aa38a533dfbd386aed1bd33162b2a
7d087a1f324101fd375ee42be14f50083c162579
0594c5cc4d1ca28534ce672d5ed17c0e7ed58c6da14509fdd38dfe9e4d5109a3
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 13:10:08 GMT
Server: Apache/2.4.54 (Unix)
X-Powered-By: PHP/7.4.32
p3p: CP="CAO PSA OUR"
cache-control: no-store
Content-Type: text/html; charset=utf-8
set-cookie: beng_proxy_session=aa323728645380e200000000de1c3117; HttpOnly; Path=/; Version=1; SameSite=strict; Discard
Keep-Alive: timeout=3, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c88bc06741ab9fb81c2544acfcc34aa2
362cab19cff5aba27f472cc00071d5dfa38192e4
314ba27975f458e13917b2be91c9d5989a3e57c9e94b5a84dd52d0e21d27ae7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "314BA27975F458E13917B2BE91C9D5989A3E57C9E94B5A84DD52D0E21D27AE7F"
Last-Modified: Mon, 14 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5258
Expires: Mon, 14 Nov 2022 14:37:47 GMT
Date: Mon, 14 Nov 2022 13:10:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lEeMslWk8hOJ8ph5V43u2iYkDJNhAH4hT62iFC20H3oL4WcOq9VtgZAOQd9dGZ6O8PU0c2b91Q4=
x-amz-request-id: KF44A1EHJ77VXDER
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 14 Nov 2022 12:13:51 GMT
age: 3378
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 14 Nov 2022 13:10:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
strato-editor.com/.cm4all/e/static/3rdparty/font-awesome/css/font-awesome.min.css
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/e/static/3rdparty/font-awesome/css/font-awesome.min.css
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/e/static/3rdparty/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/e/static/3rdparty/font-awesome/css/font-awesome.min.css
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/cm4all-beng-proxy/beng-proxy.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/cm4all-beng-proxy/beng-proxy.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /cm4all-beng-proxy/beng-proxy.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/cm4all-beng-proxy/beng-proxy.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/css/widget-runtime.css
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/css/widget-runtime.css
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/res/static/libcm4all-js-widget/3.87.12/css/widget-runtime.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/css/widget-runtime.css
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/res/static/beng-editor/5.1.96/css/deploy.css
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/res/static/beng-editor/5.1.96/css/deploy.css
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/res/static/beng-editor/5.1.96/css/deploy.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/res/static/beng-editor/5.1.96/css/deploy.css
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/css/slideshow-common.css
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/css/slideshow-common.css
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/res/static/libcm4all-js-widget/3.87.12/css/slideshow-common.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/css/slideshow-common.css
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/res/static/jquery-1.7/jquery.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/res/static/jquery-1.7/jquery.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/res/static/jquery-1.7/jquery.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/res/static/jquery-1.7/jquery.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/res/static/prototype-1.7.3/prototype.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/res/static/prototype-1.7.3/prototype.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/res/static/prototype-1.7.3/prototype.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/res/static/prototype-1.7.3/prototype.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
mindflower.group/.cm4all/widgetres.php/cm4all.com.widgets.CookiePolicy/show.js?v=3.1.46
200 OK 4.3 kB URL HTTP/1.1 mindflower.group/.cm4all/widgetres.php/cm4all.com.widgets.CookiePolicy/show.js?v=3.1.46
IP
Hash 8e1283486082c0fe4dd3b822f4c654d0
d004e335b63b078bbd3533e614040ed82f5f3b89
1f9651cb78e6dcd9c1e7d58470aaad75e0ddc78d2030f42a6efaf287c89ff98e
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/widgetres.php/cm4all.com.widgets.CookiePolicy/show.js?v=3.1.46 HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 13:10:09 GMT
Server: Apache/2.4.54 (Unix)
X-Powered-By: PHP/7.4.32
access-control-allow-origin: *
cache-control: max-age=31536000
content-length: 4289
Last-Modified: Mon, 12 Sep 2022 17:45:56 GMT
Content-Type: text/javascript;charset=UTF-8
Keep-Alive: timeout=3, max=99
Connection: Keep-Alive
strato-editor.com/.cm4all/res/static/jslib/1.2.1/js/legacy.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/res/static/jslib/1.2.1/js/legacy.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/res/static/jslib/1.2.1/js/legacy.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/res/static/jslib/1.2.1/js/legacy.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/js/widget-runtime.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/js/widget-runtime.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/res/static/libcm4all-js-widget/3.87.12/js/widget-runtime.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/js/widget-runtime.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/js/slideshow-common.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/js/slideshow-common.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/res/static/libcm4all-js-widget/3.87.12/js/slideshow-common.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/js/slideshow-common.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/res/static/beng-editor/5.1.96/js/deploy.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/res/static/beng-editor/5.1.96/js/deploy.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/res/static/beng-editor/5.1.96/js/deploy.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/res/static/beng-editor/5.1.96/js/deploy.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/uro/assets/js/uro-min.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/uro/assets/js/uro-min.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/uro/assets/js/uro-min.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/uro/assets/js/uro-min.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/main.css
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/main.css
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/main.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/main.css
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/responsive.css
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/responsive.css
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/responsive.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/responsive.css
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/cm-templates-global-style.css
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/cm-templates-global-style.css
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/cm-templates-global-style.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/cm-templates-global-style.css
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
mindflower.group/.cm4all/handler.php/vars.css?v=20220401153538
200 OK 26 kB URL HTTP/1.1 mindflower.group/.cm4all/handler.php/vars.css?v=20220401153538
IP
File type ASCII text, with very long lines (1272)
Hash 7abbcf74eeb342435a7c914daad8de7c
73f5b0b247da768537b57361c6e8ab02422b4dad
3bb62a1363c435283ec811be7cad07ccab4a5bcd8d35b14646c59b6812115ee2
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/handler.php/vars.css?v=20220401153538 HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 13:10:09 GMT
Server: Apache/2.4.54 (Unix)
X-Powered-By: PHP/7.4.32
accept-ranges: bytes
Last-Modified: Fri, 01 Apr 2022 15:35:39 GMT
etag: "2e-ff200368-62471bcb"
content-length: 26436
Content-Type: text/css
Keep-Alive: timeout=3, max=100
Connection: Keep-Alive
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/effects.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/effects.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/effects.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/effects.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm_template-focus-point.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm_template-focus-point.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm_template-focus-point.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm_template-focus-point.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm-templates-global-script.js
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm-templates-global-script.js
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm-templates-global-script.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm-templates-global-script.js
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:09 GMT
status.geotrust.com/
200 OK 471 B IP
Hash 6b776535c78f9bc110085e1ed195026d
184f8c4bcc7e07cdad6be00faab7c2a536579539
92d07c16270ffb61c4c9607a4ee5dc81268e4aade95ad05a5eb6685da1fb2573
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2318
Cache-Control: max-age=97191
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 13:10:09 GMT
Etag: "63710dca-1d7"
Expires: Tue, 15 Nov 2022 16:10:00 GMT
Last-Modified: Sun, 13 Nov 2022 15:31:22 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 6b776535c78f9bc110085e1ed195026d
184f8c4bcc7e07cdad6be00faab7c2a536579539
92d07c16270ffb61c4c9607a4ee5dc81268e4aade95ad05a5eb6685da1fb2573
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2318
Cache-Control: max-age=97191
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 13:10:09 GMT
Etag: "63710dca-1d7"
Expires: Tue, 15 Nov 2022 16:10:00 GMT
Last-Modified: Sun, 13 Nov 2022 15:31:22 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 6b776535c78f9bc110085e1ed195026d
184f8c4bcc7e07cdad6be00faab7c2a536579539
92d07c16270ffb61c4c9607a4ee5dc81268e4aade95ad05a5eb6685da1fb2573
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2318
Cache-Control: max-age=97191
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 13:10:09 GMT
Etag: "63710dca-1d7"
Expires: Tue, 15 Nov 2022 16:10:00 GMT
Last-Modified: Sun, 13 Nov 2022 15:31:22 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 6b776535c78f9bc110085e1ed195026d
184f8c4bcc7e07cdad6be00faab7c2a536579539
92d07c16270ffb61c4c9607a4ee5dc81268e4aade95ad05a5eb6685da1fb2573
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2318
Cache-Control: max-age=97191
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 13:10:09 GMT
Etag: "63710dca-1d7"
Expires: Tue, 15 Nov 2022 16:10:00 GMT
Last-Modified: Sun, 13 Nov 2022 15:31:22 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
status.geotrust.com/
200 OK 471 B IP
Hash 6b776535c78f9bc110085e1ed195026d
184f8c4bcc7e07cdad6be00faab7c2a536579539
92d07c16270ffb61c4c9607a4ee5dc81268e4aade95ad05a5eb6685da1fb2573
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3711
Cache-Control: max-age=98584
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 13:10:09 GMT
Etag: "63710dca-1d7"
Expires: Tue, 15 Nov 2022 16:33:13 GMT
Last-Modified: Sun, 13 Nov 2022 15:31:22 GMT
Server: ECS (amb/6B82)
X-Cache: HIT
Content-Length: 471
strato-editor.com/.cm4all/res/static/beng-editor/5.1.96/css/deploy.css
200 OK 2.8 kB URL HTTP/1.1 strato-editor.com/.cm4all/res/static/beng-editor/5.1.96/css/deploy.css
IP
File type ASCII text, with very long lines (14253), with no line terminators
Hash 8adeef1330fa007e72470b8d1fd4872f
7f170c581de742ae23b4429f800662fb236601dd
0fad76ec09abd6e2474ac1c7e93373b0dd81ab79bb8ef12e361c123380892139
GET /.cm4all/res/static/beng-editor/5.1.96/css/deploy.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Mon, 01 Aug 2022 11:39:49 GMT
etag: "fe02-bdf-62e7bb85"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: text/css
content-encoding: gzip
vary: accept-encoding
content-length: 2793
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/cm4all-beng-proxy/beng-proxy.js
200 OK 2.1 kB URL HTTP/1.1 strato-editor.com/cm4all-beng-proxy/beng-proxy.js
IP
Hash 194b854bb4b1aacf06882b7814ed4144
b4dcb3ebacb808dd8c52c665f72b8eaa1a4f5c18
7fb84e626da5c118db0e95e5649a1e26c5c0a36fbc4a4c77edc367cb50ec741c
GET /cm4all-beng-proxy/beng-proxy.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Wed, 31 Aug 2022 19:42:53 GMT
etag: "fe02-2ba-630fb9bd"
expires: Tue, 15 Nov 2022 13:10:09 GMT
content-type: application/javascript
accept-ranges: bytes
content-length: 2076
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/css/slideshow-common.css
200 OK 1.4 kB URL HTTP/1.1 strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/css/slideshow-common.css
IP
File type ASCII text, with very long lines (17053), with no line terminators
Hash f8d41664a1c1fe6e4207b32b84d35078
2480a26952c3743d5181af3ce0f0382b3cc64017
0d6558850bc0bd5af8a0a59abff645384c823bac90a3401f77e113d86bd67f05
GET /.cm4all/res/static/libcm4all-js-widget/3.87.12/css/slideshow-common.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Fri, 26 Aug 2022 14:44:56 GMT
etag: "fe02-1152-6308dc68"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: text/css
content-encoding: gzip
vary: accept-encoding
content-length: 1363
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/e/static/3rdparty/font-awesome/css/font-awesome.min.css
200 OK 31 kB URL HTTP/1.1 strato-editor.com/.cm4all/e/static/3rdparty/font-awesome/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /.cm4all/e/static/3rdparty/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Mon, 24 Oct 2016 15:52:54 GMT
etag: "fe02-c2c01-580e2e56"
expires: Tue, 15 Nov 2022 13:10:09 GMT
content-type: text/css
accept-ranges: bytes
content-length: 31000
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/res/static/jquery-1.7/jquery.js
200 OK 40 kB URL HTTP/1.1 strato-editor.com/.cm4all/res/static/jquery-1.7/jquery.js
IP
File type ASCII text, with very long lines (58158)
Hash 31a402cf7c2be07cab7e33027ab3950c
f63fa2eaffd4bfc6d0489ee8d2cdb0e1c5fced00
d2e2bc5c213a7e4ada9644aed43478009d46ae19831a2e1ea1d4a71ac6abb73c
GET /.cm4all/res/static/jquery-1.7/jquery.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Thu, 11 Jan 2018 14:38:20 GMT
etag: "9723af289061e4ef64b1046190459b15"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: application/javascript
content-encoding: gzip
vary: accept-encoding
content-length: 40314
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/css/widget-runtime.css
200 OK 712 B URL HTTP/1.1 strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/css/widget-runtime.css
IP
File type Unicode text, UTF-8 text, with very long lines (1897), with no line terminators
Hash fe0514092f0cd641839ce9f01bd56e12
5a93bb83d3f336d6a006e705a620d609594de8b0
9b1a3edb9ad384708b7cff2184b22236be355c2f81a646d2baf27c9c1752f32a
GET /.cm4all/res/static/libcm4all-js-widget/3.87.12/css/widget-runtime.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Fri, 26 Aug 2022 14:44:54 GMT
etag: "fe02-1355-6308dc66"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: text/css
content-encoding: gzip
vary: accept-encoding
content-length: 712
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/res/static/jslib/1.2.1/js/legacy.js
200 OK 9.6 kB URL HTTP/1.1 strato-editor.com/.cm4all/res/static/jslib/1.2.1/js/legacy.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (30284), with no line terminators
Hash 464c4992741d025d784e071546497a96
a465ba7f3a2db951e37ec54d1d71e9d752f75091
087a61135449b4662b88e1ab9ac607001cd103673197a0130b258c2d12077af8
GET /.cm4all/res/static/jslib/1.2.1/js/legacy.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Mon, 01 Aug 2022 12:44:15 GMT
etag: "fe02-207f5-62e7ca9f"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: application/javascript
content-encoding: gzip
vary: accept-encoding
content-length: 9648
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/js/slideshow-common.js
200 OK 6.3 kB URL HTTP/1.1 strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/js/slideshow-common.js
IP
File type HTML document, ASCII text, with very long lines (20826), with no line terminators
Hash 5349bae1eba8c85fddb8413e1321ee7b
42cc44bfcbbcf499d12f81c9c8c4f8f5dba3d70a
e6ae44443ec547e381cb64b8735587bd499199b2ef9069274f8225e579cd0cd6
GET /.cm4all/res/static/libcm4all-js-widget/3.87.12/js/slideshow-common.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Fri, 26 Aug 2022 14:44:56 GMT
etag: "fe02-1154-6308dc68"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: application/javascript
content-encoding: gzip
vary: accept-encoding
content-length: 6251
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/res/static/beng-editor/5.1.96/js/deploy.js
200 OK 5.1 kB URL HTTP/1.1 strato-editor.com/.cm4all/res/static/beng-editor/5.1.96/js/deploy.js
IP
Hash 63a05e2ff4adc6858210ee4316a414fb
f28ed1d1960adebd6bc5372880eec1be20cbf276
5dce5ae382b286936ce51a1385870a92aff941d2fb36eef619a7407180ea5342
GET /.cm4all/res/static/beng-editor/5.1.96/js/deploy.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Mon, 01 Aug 2022 11:39:49 GMT
etag: "fe02-c3e-62e7bb85"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: application/javascript
content-encoding: gzip
vary: accept-encoding
content-length: 5119
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/res/static/prototype-1.7.3/prototype.js
200 OK 34 kB URL HTTP/1.1 strato-editor.com/.cm4all/res/static/prototype-1.7.3/prototype.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 263ea58207bc1d8ed3bd089ed31a32b6
928e6e446e9e0be82af358efe95ef7f322eb8cc4
5f024b0c2bc38035a39566e5f95ea96aa8639852df5001c63d5dfaaff6f08f9b
GET /.cm4all/res/static/prototype-1.7.3/prototype.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Fri, 29 Sep 2017 11:41:30 GMT
etag: "dbe3e04290c71b72eb1e7c864bb86d94"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: application/javascript
content-encoding: gzip
vary: accept-encoding
content-length: 34085
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/uro/assets/js/uro-min.js
200 OK 500 B URL HTTP/1.1 strato-editor.com/.cm4all/uro/assets/js/uro-min.js
IP
File type ASCII text, with very long lines (859)
Hash 9513a0f4643d6f4b38b5a38a15d7b862
6abbd7039a2d98e0b5baf9feb5f6b36a78e3de9c
cbb5a90477e239ad22edb9e023000e6157588136e5e90d0a775de446bdef2742
GET /.cm4all/uro/assets/js/uro-min.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Wed, 07 Sep 2022 14:31:18 GMT
etag: "fe02-2337f-6318ab36"
expires: Tue, 15 Nov 2022 13:10:09 GMT
content-type: application/javascript
content-encoding: gzip
vary: accept-encoding
content-length: 500
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/js/widget-runtime.js
200 OK 36 kB URL HTTP/1.1 strato-editor.com/.cm4all/res/static/libcm4all-js-widget/3.87.12/js/widget-runtime.js
IP
File type Unicode text, UTF-8 text, with very long lines (402)
Hash 7e49b88cfb5b26badb570c70bcb48c87
01999f876c46467d6dd9c3d6531b3fd8451b4598
6f27014deaf1e903b5185b6e71dbfcbc6a1e7085afd1dcbaab0ff1a6f5b0ec28
GET /.cm4all/res/static/libcm4all-js-widget/3.87.12/js/widget-runtime.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Fri, 26 Aug 2022 14:44:54 GMT
etag: "fe02-1356-6308dc66"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: application/javascript
content-encoding: gzip
vary: accept-encoding
content-length: 36446
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/responsive.css
200 OK 905 B URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/responsive.css
IP
Hash 3eb002afb9e407f3b30b0723b60c8a2e
62273839fb78f054db228c0b8705c70a4d72e836
998ed2d56a86384776f337e1cb6d22f051e22085d3fd6847bd771e8ec2e1c1b1
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/responsive.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Tue, 22 Jun 2021 22:07:50 GMT
etag: "30-fe4a97ab-60d25f36"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: text/css
content-encoding: gzip
vary: accept-encoding
content-length: 905
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/cm-templates-global-style.css
200 OK 20 B URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/cm-templates-global-style.css
IP
Hash 3970e82605c7d109bb348fc94e9eecc0
e03849ea786b9f7b28a35c17949e85a93eb1cff1
f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/css/cm-templates-global-style.css HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Tue, 22 Jun 2021 22:07:50 GMT
etag: "30-fe4a97a9-60d25f36"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: text/css
content-encoding: gzip
vary: accept-encoding
content-length: 20
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm_template-focus-point.js
200 OK 1.1 kB URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm_template-focus-point.js
IP
Hash cab9f5d77561d61b01e828e93df6e98b
528d4ddad9bdd50ea82703e59fe20208d1abfe53
2943faf86da4e53dcefe329d051177edc2dda8ccb7a5f01f5eff5c47b0d37118
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm_template-focus-point.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Wed, 14 Apr 2021 06:49:38 GMT
etag: "30-ffef961a-60769082"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: application/javascript
content-encoding: gzip
vary: accept-encoding
content-length: 1146
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm-templates-global-script.js
200 OK 224 B URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm-templates-global-script.js
IP
Hash 4216771b2a7fe6a4d18a4a39f50d4aad
cb04355db7124ec8f48d1f01bc123825b31df55b
8aaeace939906ff79ce8cb2a5752d01771fa2c94b4645c9b82e8da712f3cdf7b
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/cm-templates-global-script.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Tue, 22 Jun 2021 11:35:02 GMT
etag: "30-ffef9619-60d1cae6"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: application/javascript
content-encoding: gzip
vary: accept-encoding
content-length: 224
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/effects.js
200 OK 3.2 kB URL HTTP/1.1 strato-editor.com/.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/effects.js
IP
Hash b576d79e55cfa19719f560416864fb3b
21c5f68d401bcbbece8b56d95fd3968470d52d48
76d724df830865bf1a7ad3cd8d59351b1baf1e791db3fb37b9499773d0b77569
GET /.cm4all/designs/static/sys/cm_dux_094/1624399671.64/js/effects.js HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Tue, 01 Jun 2021 07:21:32 GMT
etag: "30-ffef961b-60b5dffc"
expires: Tue, 14 Nov 2023 13:10:09 GMT
content-type: application/javascript
content-encoding: gzip
vary: accept-encoding
content-length: 3244
date: Mon, 14 Nov 2022 13:10:09 GMT
server: CM4all Webserver
fonts.cm4all.net/css?subset=cyrillic,cyrillic-ext,devanagari,greek,greek-ext,khmer,latin,latin-ext,vietnamese&family=Average:regular|Istok+Web:regular,italic,700,700italic|Cormorant+Garamond:300,300italic,regular,italic,500,500italic,600,600italic,700,700italic|Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Montserrat:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic|Poppins:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic
200 OK 77 kB URL HTTP/1.1 fonts.cm4all.net/css?subset=cyrillic,cyrillic-ext,devanagari,greek,greek-ext,khmer,latin,latin-ext,vietnamese&family=Average:regular|Istok+Web:regular,italic,700,700italic|Cormorant+Garamond:300,300italic,regular,italic,500,500italic,600,600italic,700,700italic|Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Montserrat:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic|Poppins:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic
IP
Hash 597ede9e251280d639ce8d2938a31d46
ce0e7a12dcdc31ac96048220347d9895dc7da079
cd35c6e62648e86db376886f4861f1157241f771786390cf44f95de456381ffb
GET /css?subset=cyrillic,cyrillic-ext,devanagari,greek,greek-ext,khmer,latin,latin-ext,vietnamese&family=Average:regular|Istok+Web:regular,italic,700,700italic|Cormorant+Garamond:300,300italic,regular,italic,500,500italic,600,600italic,700,700italic|Lato:100,100italic,300,300italic,regular,italic,700,700italic,900,900italic|Montserrat:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic|Poppins:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic HTTP/1.1
Host: fonts.cm4all.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 13:10:09 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
Expires: Mon, 14 Nov 2022 13:10:09 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Accept-Ranges: none
Vary: Accept-Encoding
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 14 Nov 2022 12:44:48 GMT
cache-control: public,max-age=3600
age: 1521
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
mindflower.group/.cm4all/uproc.php/0/Designvorlage/.Strato-6701189-vid_01.mkv/poster?_=16d8125fb08
302 Found 0 B URL HTTP/1.1 mindflower.group/.cm4all/uproc.php/0/Designvorlage/.Strato-6701189-vid_01.mkv/poster?_=16d8125fb08
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/uproc.php/0/Designvorlage/.Strato-6701189-vid_01.mkv/poster?_=16d8125fb08 HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 302 Found
Date: Mon, 14 Nov 2022 13:10:09 GMT
Server: Apache/2.4.54 (Unix)
X-Powered-By: PHP/7.4.32
Location: /./.cm4all/mediadb/Designvorlage/.Strato-6701189-vid_01.mkv/poster
Content-Type: text/html
Keep-Alive: timeout=3, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
mindflower.group/.cm4all/widgetres.php/com.cm4all.wdn.Button/css/show.min.css?v=15.css
200 OK 2.2 kB URL HTTP/1.1 mindflower.group/.cm4all/widgetres.php/com.cm4all.wdn.Button/css/show.min.css?v=15.css
IP
File type ASCII text, with very long lines (2199), with no line terminators
Hash afc67cb231a7fe7da733a749e8853263
ac713e56563bfc614904b7730e3b54018ee21138
dce05b55f7d9b531e1e4b615a082882fe3e160f23f34438a22c857433e787392
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/widgetres.php/com.cm4all.wdn.Button/css/show.min.css?v=15.css HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 13:10:09 GMT
Server: Apache/2.4.54 (Unix)
X-Powered-By: PHP/7.4.32
access-control-allow-origin: *
accept-ranges: bytes
cache-control: public, max-age=86400
content-length: 2199
etag: "635194be-897"
Last-Modified: Thu, 20 Oct 2022 18:34:38 GMT
Content-Type: text/css
Keep-Alive: timeout=3, max=98
Connection: Keep-Alive
mindflower.group/.cm4all/widgetres.php/cm4all.com.widgets.CookiePolicy/show.css?v=3.1.46
200 OK 15 kB URL HTTP/1.1 mindflower.group/.cm4all/widgetres.php/cm4all.com.widgets.CookiePolicy/show.css?v=3.1.46
IP
Hash 3a76202d05139922bfc8829c04897f74
a70529e71a4f2b0d85486644ba6407626495cfeb
e3fca77adb2d1e5735e84b292a44e9e73427657c2d22d9270d792377a67a298a
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/widgetres.php/cm4all.com.widgets.CookiePolicy/show.css?v=3.1.46 HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 13:10:09 GMT
Server: Apache/2.4.54 (Unix)
X-Powered-By: PHP/7.4.32
access-control-allow-origin: *
cache-control: max-age=31536000
content-length: 14936
Last-Modified: Mon, 12 Sep 2022 17:45:56 GMT
Content-Type: text/css;charset=UTF-8
Keep-Alive: timeout=3, max=98
Connection: Keep-Alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 3200044057cb585f1a435c0efece61c8
8305d5b5891288aa9996b4b4ca6fce2265413194
df45704534a24928e7659a6d8cd1b5ac9ffa9b224b02b34a2d6aed5ef69fd586
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5189
Cache-Control: max-age=163400
Content-Type: application/ocsp-response
Date: Mon, 14 Nov 2022 13:10:10 GMT
Etag: "63720535-1d7"
Expires: Wed, 16 Nov 2022 10:33:30 GMT
Last-Modified: Mon, 14 Nov 2022 09:07:01 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
strato-editor.com/.cm4all/_pixel.img?site=1976406-AoGLczXk&page=pid_5081828&path=%2Fstart%2Findex.php%2F&nt=Home&domain=mindflower.group&ref=
301 Moved Permanently 26 B URL HTTP/1.1 strato-editor.com/.cm4all/_pixel.img?site=1976406-AoGLczXk&page=pid_5081828&path=%2Fstart%2Findex.php%2F&nt=Home&domain=mindflower.group&ref=
IP
File type ASCII text, with no line terminators
Hash 2ef27b5421b25c11cb1cad8fabc6348f
d57fa451961aad67be222caa47da7de7e2ac2cb4
ee6730380abe73154592c1e2e1f2065240df51c128f28debfef73d76ae9afe60
GET /.cm4all/_pixel.img?site=1976406-AoGLczXk&page=pid_5081828&path=%2Fstart%2Findex.php%2F&nt=Home&domain=mindflower.group&ref= HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
HTTP/1.1 301 Moved Permanently
location: https://strato-editor.com/.cm4all/_pixel.img?site=1976406-AoGLczXk&page=pid_5081828&path=%2Fstart%2Findex.php%2F&nt=Home&domain=mindflower.group&ref=
content-type: text/plain
content-length: 26
date: Mon, 14 Nov 2022 13:10:10 GMT
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 187656591112cac3a061eb4fba0d7dcc
f1f37358d4558448f7f9f5c4bc2d227dc754ddd8
b8d0454fa66b0223239e8462efee6e0bc23e806b704ee3e252aa5e87629dcf2f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8D0454FA66B0223239E8462EFEE6E0BC23E806B704EE3E252AA5E87629DCF2F"
Last-Modified: Mon, 14 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8979
Expires: Mon, 14 Nov 2022 15:39:49 GMT
Date: Mon, 14 Nov 2022 13:10:10 GMT
Connection: keep-alive
mindflower.group/.cm4all/uproc.php/0/Logo%20mindflower%2013%20registrated.gif?_=17d246c4d3a
302 Found 0 B URL HTTP/1.1 mindflower.group/.cm4all/uproc.php/0/Logo%20mindflower%2013%20registrated.gif?_=17d246c4d3a
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/uproc.php/0/Logo%20mindflower%2013%20registrated.gif?_=17d246c4d3a HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 302 Found
Date: Mon, 14 Nov 2022 13:10:10 GMT
Server: Apache/2.4.54 (Unix)
X-Powered-By: PHP/7.4.32
Location: /./.cm4all/mediadb/Logo%20mindflower%2013%20registrated.gif
Content-Type: text/html
Keep-Alive: timeout=3, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 187656591112cac3a061eb4fba0d7dcc
f1f37358d4558448f7f9f5c4bc2d227dc754ddd8
b8d0454fa66b0223239e8462efee6e0bc23e806b704ee3e252aa5e87629dcf2f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8D0454FA66B0223239E8462EFEE6E0BC23E806B704EE3E252AA5E87629DCF2F"
Last-Modified: Mon, 14 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8979
Expires: Mon, 14 Nov 2022 15:39:49 GMT
Date: Mon, 14 Nov 2022 13:10:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 187656591112cac3a061eb4fba0d7dcc
f1f37358d4558448f7f9f5c4bc2d227dc754ddd8
b8d0454fa66b0223239e8462efee6e0bc23e806b704ee3e252aa5e87629dcf2f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8D0454FA66B0223239E8462EFEE6E0BC23E806B704EE3E252AA5E87629DCF2F"
Last-Modified: Mon, 14 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8979
Expires: Mon, 14 Nov 2022 15:39:49 GMT
Date: Mon, 14 Nov 2022 13:10:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 187656591112cac3a061eb4fba0d7dcc
f1f37358d4558448f7f9f5c4bc2d227dc754ddd8
b8d0454fa66b0223239e8462efee6e0bc23e806b704ee3e252aa5e87629dcf2f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8D0454FA66B0223239E8462EFEE6E0BC23E806B704EE3E252AA5E87629DCF2F"
Last-Modified: Mon, 14 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8979
Expires: Mon, 14 Nov 2022 15:39:49 GMT
Date: Mon, 14 Nov 2022 13:10:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 187656591112cac3a061eb4fba0d7dcc
f1f37358d4558448f7f9f5c4bc2d227dc754ddd8
b8d0454fa66b0223239e8462efee6e0bc23e806b704ee3e252aa5e87629dcf2f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8D0454FA66B0223239E8462EFEE6E0BC23E806B704EE3E252AA5E87629DCF2F"
Last-Modified: Mon, 14 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8979
Expires: Mon, 14 Nov 2022 15:39:49 GMT
Date: Mon, 14 Nov 2022 13:10:10 GMT
Connection: keep-alive
strato-editor.com/.cm4all/_pixel.img?site=1976406-AoGLczXk&page=pid_5081828&path=%2Fstart%2Findex.php%2F&nt=Home&domain=mindflower.group&ref=
200 OK 43 B URL HTTP/1.1 strato-editor.com/.cm4all/_pixel.img?site=1976406-AoGLczXk&page=pid_5081828&path=%2Fstart%2Findex.php%2F&nt=Home&domain=mindflower.group&ref=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /.cm4all/_pixel.img?site=1976406-AoGLczXk&page=pid_5081828&path=%2Fstart%2Findex.php%2F&nt=Home&domain=mindflower.group&ref= HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mindflower.group/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-length: 43
date: Mon, 14 Nov 2022 13:10:10 GMT
server: CM4all Webserver
cache-control: no-store, no-cache, must-revalidate
content-type: image/gif
expires: Sat, 01 Jan 2000 00:00:00 UTC
set-cookie: vid=07881B3ABD490C7C1EACE2DF8A3706AFDC96; Expires=Mon, 21 Nov 2022 13:10:10 GMT; SameSite=None; Secure
mindflower.group/.cm4all/uproc.php/0/Designvorlage/.Strato-6701189-vid_01.mkv/video.mp4?_=16d8125fb08
302 Found 0 B URL HTTP/1.1 mindflower.group/.cm4all/uproc.php/0/Designvorlage/.Strato-6701189-vid_01.mkv/video.mp4?_=16d8125fb08
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/uproc.php/0/Designvorlage/.Strato-6701189-vid_01.mkv/video.mp4?_=16d8125fb08 HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://mindflower.group/
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 302 Found
Date: Mon, 14 Nov 2022 13:10:10 GMT
Server: Apache/2.4.54 (Unix)
X-Powered-By: PHP/7.4.32
Location: /./.cm4all/mediadb/Designvorlage/.Strato-6701189-vid_01.mkv/video.mp4
Content-Type: text/html
Keep-Alive: timeout=3, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
mindflower.group/.cm4all/uproc.php/0/welcome.gif?_=17b8305c698
302 Found 0 B URL HTTP/1.1 mindflower.group/.cm4all/uproc.php/0/welcome.gif?_=17b8305c698
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/uproc.php/0/welcome.gif?_=17b8305c698 HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 302 Found
Date: Mon, 14 Nov 2022 13:10:10 GMT
Server: Apache/2.4.54 (Unix)
X-Powered-By: PHP/7.4.32
Location: /./.cm4all/mediadb/welcome.gif
Content-Type: text/html
Keep-Alive: timeout=3, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
mindflower.group/.cm4all/uproc.php/0/.mind%202.jpg/picture-1600?_=17ceba56746
302 Found 0 B URL HTTP/1.1 mindflower.group/.cm4all/uproc.php/0/.mind%202.jpg/picture-1600?_=17ceba56746
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/uproc.php/0/.mind%202.jpg/picture-1600?_=17ceba56746 HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mindflower.group/
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 302 Found
Date: Mon, 14 Nov 2022 13:10:10 GMT
Server: Apache/2.4.54 (Unix)
X-Powered-By: PHP/7.4.32
Location: /./.cm4all/mediadb/.mind%202.jpg/picture-1600
Content-Type: text/html
Keep-Alive: timeout=3, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
mindflower.group/.cm4all/mediadb/Designvorlage/.Strato-6701189-vid_01.mkv/poster
200 OK 95 kB URL HTTP/1.1 mindflower.group/.cm4all/mediadb/Designvorlage/.Strato-6701189-vid_01.mkv/poster
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 241x226, segment length 16, comment: "Lavc57.64.101", baseline, precision 8, 1280x720, components 3\012- data
Hash 4084c9fe4e495b5317870ce44c43499d
0cbb00d3d7d6ddb21dfdc34b385b160f1ef4780d
e24fb94cc5e1db4dd4ee6bfa5d2882e00eb0cb18c70058b3f6b2fc422f0ab6dc
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/mediadb/Designvorlage/.Strato-6701189-vid_01.mkv/poster HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mindflower.group/
Connection: keep-alive
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 13:10:10 GMT
Server: Apache/2.4.54 (Unix)
Last-Modified: Mon, 31 May 2021 13:16:32 GMT
ETag: "173de-5c3a008b7cc00"
Accept-Ranges: bytes
Content-Length: 95198
Keep-Alive: timeout=3, max=97
Connection: Keep-Alive
strato-editor.com/.cm4all/e/static/3rdparty/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/1.1 strato-editor.com/.cm4all/e/static/3rdparty/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /.cm4all/e/static/3rdparty/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: strato-editor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mindflower.group
Connection: keep-alive
Referer: https://strato-editor.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
last-modified: Mon, 24 Oct 2016 15:52:54 GMT
etag: "fe02-c2bf9-580e2e56"
expires: Tue, 15 Nov 2022 13:10:10 GMT
content-type: application/font-woff2
accept-ranges: bytes
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
content-length: 77160
date: Mon, 14 Nov 2022 13:10:10 GMT
server: CM4all Webserver
mindflower.group/.cm4all/mediadb/Logo%20mindflower%2013%20registrated.gif
200 OK 23 kB URL HTTP/1.1 mindflower.group/.cm4all/mediadb/Logo%20mindflower%2013%20registrated.gif
IP
File type GIF image data, version 89a, 1867 x 722\012- data
Hash 31bd81653b98007043d97ea56b82e1fb
f1528a16fd56f14b320132ddd98466960c4423b2
1cbf2dce506b9fe90072b1bf33b25442499d7bd15f24c5c7f7080fcd477c4830
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/mediadb/Logo%20mindflower%2013%20registrated.gif HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mindflower.group/
Connection: keep-alive
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 13:10:10 GMT
Server: Apache/2.4.54 (Unix)
Last-Modified: Mon, 15 Nov 2021 16:26:57 GMT
ETag: "5987-5d0d6470a7640"
Accept-Ranges: bytes
Content-Length: 22919
Keep-Alive: timeout=3, max=100
Connection: Keep-Alive
Content-Type: image/gif
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: d70Nt5xp1OYcGZgWYuVUDA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 72FtHfUGHMtWx/sd1EeBwvnWD9w=
fonts.cm4all.net/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.cm4all.net/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.cm4all.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mindflower.group
Connection: keep-alive
Referer: http://fonts.cm4all.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Nov 2022 13:10:10 GMT
content-type: font/woff2
content-length: 23040
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
expires: Sat, 11 Nov 2023 09:59:57 GMT
cache-control: public, max-age=31536000
age: 260448
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.cm4all.net/s/average/v18/fC1hPYBHe23MxA7rEeV6VA.woff2
200 OK 21 kB URL HTTP/2 fonts.cm4all.net/s/average/v18/fC1hPYBHe23MxA7rEeV6VA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21136, version 1.0\012- data
Hash aba56a0c2d95faefc361a3bbbf5648d0
feab0e8655ce04ff7ccb957c455f2543a5517f49
50711c09b844ab28e8e6e80fd21883b51bbea6cc28583b8580bf4875d7ded1f7
GET /s/average/v18/fC1hPYBHe23MxA7rEeV6VA.woff2 HTTP/1.1
Host: fonts.cm4all.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mindflower.group
Connection: keep-alive
Referer: http://fonts.cm4all.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Nov 2022 13:10:10 GMT
content-type: font/woff2
content-length: 21136
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
expires: Wed, 08 Nov 2023 20:59:20 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 08 Nov 2022 19:52:42 GMT
age: 467166
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.cm4all.net/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.cm4all.net/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.cm4all.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mindflower.group
Connection: keep-alive
Referer: http://fonts.cm4all.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 14 Nov 2022 13:10:10 GMT
content-type: font/woff2
content-length: 7884
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
expires: Thu, 02 Nov 2023 19:24:53 GMT
cache-control: public, max-age=31536000
age: 384708
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.cm4all.net/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
200 OK 24 kB URL HTTP/2 fonts.cm4all.net/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24408, version 1.0\012- data
Hash efee2d080d7bebdd2e0aeb2e030813a0
f8d38f9f9584e48c2e469877ebd94232265585f1
bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0
GET /s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1
Host: fonts.cm4all.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mindflower.group
Connection: keep-alive
Referer: http://fonts.cm4all.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Nov 2022 13:10:10 GMT
content-type: font/woff2
content-length: 24408
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
expires: Sat, 11 Nov 2023 11:52:15 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 26 Apr 2022 15:50:25 GMT
age: 239507
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.cm4all.net/s/istokweb/v20/3qTvojGmgSyUukBzKslpBmt_.woff2
200 OK 24 kB URL HTTP/2 fonts.cm4all.net/s/istokweb/v20/3qTvojGmgSyUukBzKslpBmt_.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24300, version 1.0\012- data
Hash 5fa7c9988d1a4e410bb5056fddd44ba4
d468c4892d035bde674940607f11c9740b85811e
a13c9efb15d11e0d7c3d34f3a31391310c22aedff9d364add903ad6a6285e81a
GET /s/istokweb/v20/3qTvojGmgSyUukBzKslpBmt_.woff2 HTTP/1.1
Host: fonts.cm4all.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mindflower.group
Connection: keep-alive
Referer: http://fonts.cm4all.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 14 Nov 2022 13:10:10 GMT
content-type: font/woff2
content-length: 24300
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
expires: Fri, 03 Nov 2023 21:41:14 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 26 Apr 2022 15:27:33 GMT
age: 290507
accept-ranges: bytes
X-Firefox-Spdy: h2
mindflower.group/.cm4all/mediadb/welcome.gif
200 OK 39 kB URL HTTP/1.1 mindflower.group/.cm4all/mediadb/welcome.gif
IP
File type GIF image data, version 89a, 3508 x 1966\012- data
Hash 4100c4d7127bb02c41c3e7ec3f1b2c04
b7dcc5c50a0cf4302c27cb1101c2b074f23b6197
c30e01687bb82d2cd40da8bb7a8345c8679e8e1e88f785694dc9fb9fe856dd68
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/mediadb/welcome.gif HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mindflower.group/
Connection: keep-alive
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 13:10:10 GMT
Server: Apache/2.4.54 (Unix)
Last-Modified: Thu, 26 Aug 2021 15:13:19 GMT
ETag: "9837-5ca77ce8fc1c0"
Accept-Ranges: bytes
Content-Length: 38967
Keep-Alive: timeout=3, max=99
Connection: Keep-Alive
Content-Type: image/gif
fonts.cm4all.net/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEO7uj-KzhM.woff2
200 OK 22 kB URL HTTP/2 fonts.cm4all.net/s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEO7uj-KzhM.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21956, version 1.0\012- data
Hash 384df4e18d920564f34ab3ee36d081a7
992ffbd5715d32ef29560d139ba38b4cab34854c
66b937da1d31b12fa88c8ca30027b668961bc40421451700fc182f745a3f7a6e
GET /s/cormorantgaramond/v16/co3WmX5slCNuHLi8bLeY9MK7whWMhyjYrEO7uj-KzhM.woff2 HTTP/1.1
Host: fonts.cm4all.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mindflower.group
Connection: keep-alive
Referer: http://fonts.cm4all.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 14 Nov 2022 13:10:10 GMT
content-type: font/woff2
content-length: 21956
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
expires: Wed, 08 Nov 2023 06:55:44 GMT
cache-control: public, max-age=31536000
age: 517157
last-modified: Tue, 09 Aug 2022 02:22:11 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.cm4all.net/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.cm4all.net/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.cm4all.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mindflower.group
Connection: keep-alive
Referer: http://fonts.cm4all.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 14 Nov 2022 13:10:10 GMT
content-type: font/woff2
content-length: 23580
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
expires: Wed, 08 Nov 2023 17:08:09 GMT
cache-control: public, max-age=31536000
age: 493977
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.cm4all.net/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.cm4all.net/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.cm4all.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mindflower.group
Connection: keep-alive
Referer: http://fonts.cm4all.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 14 Nov 2022 13:10:10 GMT
content-type: font/woff2
content-length: 30928
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
expires: Sat, 11 Nov 2023 01:41:22 GMT
cache-control: public, max-age=31536000
age: 275542
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.cm4all.net/s/istokweb/v20/3qTqojGmgSyUukBzKslhvU5q-WMV.woff2
200 OK 24 kB URL HTTP/2 fonts.cm4all.net/s/istokweb/v20/3qTqojGmgSyUukBzKslhvU5q-WMV.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23928, version 1.0\012- data
Hash 6c307efa84c9547ef5f39f22b15fb5ed
e5b3a2c23774650197a62b171ebc6edbe956fbbd
3de05c4312c4ad5f9bc8fa667c32bf98fbf81b5a757dfffb4cb99a41ab57626a
GET /s/istokweb/v20/3qTqojGmgSyUukBzKslhvU5q-WMV.woff2 HTTP/1.1
Host: fonts.cm4all.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://mindflower.group
Connection: keep-alive
Referer: http://fonts.cm4all.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 14 Nov 2022 13:10:10 GMT
content-type: font/woff2
content-length: 23928
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
expires: Fri, 10 Nov 2023 08:23:19 GMT
cache-control: public, max-age=31536000
age: 338798
last-modified: Tue, 26 Apr 2022 15:29:37 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
mindflower.group/.cm4all/mediadb/.mind%202.jpg/picture-1600
200 OK 132 kB URL HTTP/1.1 mindflower.group/.cm4all/mediadb/.mind%202.jpg/picture-1600
IP
File type JPEG image data, baseline, precision 8, 1600x1200, components 3\012- data
Size 132 kB (131979 bytes)
Hash ed2e92b810af7053e3c37ca74f252450
c131cbdf354d31118514074ffb2ed8e87b922308
1fa36f47b380eb0af00e0fb703eb3a5b9369d6bc6ed5d7678a32f261ce400f82
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/mediadb/.mind%202.jpg/picture-1600 HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://mindflower.group/
Connection: keep-alive
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 200 OK
Date: Mon, 14 Nov 2022 13:10:10 GMT
Server: Apache/2.4.54 (Unix)
Last-Modified: Thu, 04 Nov 2021 15:51:05 GMT
ETag: "2038b-5cff87e846c40"
Accept-Ranges: bytes
Content-Length: 131979
Keep-Alive: timeout=3, max=98
Connection: Keep-Alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3340
Expires: Mon, 14 Nov 2022 14:05:51 GMT
Date: Mon, 14 Nov 2022 13:10:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3340
Expires: Mon, 14 Nov 2022 14:05:51 GMT
Date: Mon, 14 Nov 2022 13:10:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3340
Expires: Mon, 14 Nov 2022 14:05:51 GMT
Date: Mon, 14 Nov 2022 13:10:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 929d046b7cbed155022099e982ba0592
18ff58f5b4d98748552d6604bdcba9c57eb8f412
3c70c27c11afeaea96e782a0e7b7ae9c2f3ed35c94673fcd4361cb7406b078a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C70C27C11AFEAEA96E782A0E7B7AE9C2F3ED35C94673FCD4361CB7406B078A9"
Last-Modified: Sat, 12 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3340
Expires: Mon, 14 Nov 2022 14:05:51 GMT
Date: Mon, 14 Nov 2022 13:10:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa95e3362-3324-487e-af72-a8801904975f.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa95e3362-3324-487e-af72-a8801904975f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ceefde63fac8b44410baa7054cbbf39d
bc5a776a90f9ff1c5bd6e3dad0a542d3b73bad88
6e55d25f544d934550970c70a8325886471550d1d4f757610b13800985896ba1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa95e3362-3324-487e-af72-a8801904975f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9663
x-amzn-requestid: ef07bc3a-4907-484b-9113-f00e08442f33
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyFUHz6IAMFrXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163bb-1c1a2d0d4aeae314494e4b33;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:38:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: fWVjU2p0gxiXvlch1JwzoAc7RHvtGt0jTQqb99ERvCfVw7ZUPJz2XQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 22:04:26 GMT
etag: "bc5a776a90f9ff1c5bd6e3dad0a542d3b73bad88"
content-type: image/jpeg
age: 54345
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03b751df-18d0-4e56-8d74-5d8e8d02f241.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03b751df-18d0-4e56-8d74-5d8e8d02f241.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dfc7286992b2cebdf1ebb58f85576e61
a49a1bf9716e32979810931d04d1f84216d096c1
7c5288d4ae39202e00c7fd482faa10b5610d31edf0bba9fc69fa4fc1f422b837
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F03b751df-18d0-4e56-8d74-5d8e8d02f241.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7494
x-amzn-requestid: b07e424a-c11e-442f-8636-e0670cb6f864
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bd8heGBtoAMFYQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636f0e09-7dcda14e5077563d726752ae;Sampled=0
x-amzn-remapped-date: Sat, 12 Nov 2022 03:07:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: VXu3wEUmBJjK6YiXRFYVAuZ3h-ApKkvK1miRBXpo6faKsx8OOXu0JQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Mon, 14 Nov 2022 03:14:47 GMT
age: 35724
etag: "a49a1bf9716e32979810931d04d1f84216d096c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a0db3498954921b58948ad8a4e7fd49f
6b618c3ff6e589f9e01650bd0a619acb70d8004e
fa3baa9e32e455ab2eeefab0c76714bf0ff5f67a5ccd7c10b3f5c21d8138c5cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5797e726-229b-4f42-9376-00ae67e14407.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6535
x-amzn-requestid: 3333aa65-c0c7-4704-9af1-fb0a49f830fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyDtHbhoAMFSsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-51c3e4513240b7e5662b8e6e;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6dTOcWIKFuo-Thf3zUH_1WY70yFyQkj3w2xPrb6Ntjf8TUFPVG-_lA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 22:01:14 GMT
age: 54537
etag: "6b618c3ff6e589f9e01650bd0a619acb70d8004e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F213417cd-cf64-4d28-ae86-bd6f16cecb3b.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F213417cd-cf64-4d28-ae86-bd6f16cecb3b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f1e763f44800e4de06d69a3b2af74da
35afe48832221fe42de30260b9bcb15867109031
5f234c025d1f586b4364d2ef8c2818d3d4d441691444bb885e89f4c150b3d2a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F213417cd-cf64-4d28-ae86-bd6f16cecb3b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9322
x-amzn-requestid: 0becd817-a29e-46bf-b9d6-2d18e12f5fe9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjyDvE8DoAMFsiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637163b1-5b4bf1674c4edf80458cf53f;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:37:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6eUvvtJ48e5eRUJffmsuc9-blgv2dHt-Lsemnf-i8mLQ9CpY0Y94sQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 22:13:29 GMT
age: 53802
etag: "35afe48832221fe42de30260b9bcb15867109031"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X3SUo1LP97TxraRav0ftskBhzWkTJInHaS44PW26yloF-dgD-bHBuA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 21:52:43 GMT
age: 55048
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68733d52-6c87-4ac4-ba56-bc5f74ff782b.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68733d52-6c87-4ac4-ba56-bc5f74ff782b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ac5583760066002adcbba078f6dd1be4
39ca30395586cf1a0a0fa739f7279af807f548a3
cb5986e3330858716cd290297a81d77e371b838637fc57eece94810211715a7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68733d52-6c87-4ac4-ba56-bc5f74ff782b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9921
x-amzn-requestid: 933f6aa6-3bec-4f71-aba8-ef9e77942ae9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bjycgGB-oAMFsDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371644f-47d26359464b62b7276316e6;Sampled=0
x-amzn-remapped-date: Sun, 13 Nov 2022 21:40:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9DG6rCPdRRiHKrAVXztWJwZlUYYCb893lXH8YDzEMGSEUbeaVkABWw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 13 Nov 2022 22:04:26 GMT
age: 54345
etag: "39ca30395586cf1a0a0fa739f7279af807f548a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mindflower.group/.cm4all/mediadb/Designvorlage/.Strato-6701189-vid_01.mkv/video.mp4
206 Partial Content 0 B URL HTTP/1.1 mindflower.group/.cm4all/mediadb/Designvorlage/.Strato-6701189-vid_01.mkv/video.mp4
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /.cm4all/mediadb/Designvorlage/.Strato-6701189-vid_01.mkv/video.mp4 HTTP/1.1
Host: mindflower.group
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Range: bytes=0-
Referer: http://mindflower.group/
Connection: keep-alive
Cookie: beng_proxy_session=aa323728645380e200000000de1c3117
HTTP/1.1 206 Partial Content
Date: Mon, 14 Nov 2022 13:10:10 GMT
Server: Apache/2.4.54 (Unix)
Last-Modified: Mon, 31 May 2021 13:16:32 GMT
ETag: "31ff2b-5c3a008b7cc00"
Accept-Ranges: bytes
Content-Length: 3276587
Content-Range: bytes 0-3276586/3276587
Keep-Alive: timeout=3, max=96
Connection: Keep-Alive
Content-Type: video/mp4
81.169.145.80
23.36.77.32
34.102.187.140
93.184.220.29