Overview

URLalamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
IP 167.86.66.22 (Germany)
ASN#51167 Contabo GmbH
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-12 22:24:08 UTC
StatusLoading report..
IDS alerts0
Blocklist alert11
urlquery alerts No alerts detected
Tags None

Domain Summary (12)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-10T05:10:02Z 606 127 35.164.183.116
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-10T05:10:04Z 3246 50564 34.120.237.76
ocsp.digicert.com (2) 86 2012-05-21T09:02:23Z 2023-03-10T13:49:44Z 682 1594 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-10T05:12:35Z 413 5844 34.160.144.191
alamopublishing.com (14) 0 2020-05-29T14:40:29Z 2023-03-03T22:15:29Z 8157 132978 167.86.66.22
cdnjs.cloudflare.com (2) 235 2015-04-17T22:46:33Z 2023-03-10T08:04:05Z 868 13763 104.17.25.14
fonts.googleapis.com (4) 8877 2013-06-10T22:14:26Z 2023-03-10T12:25:49Z 1700 4007 142.250.74.10
r3.o.lencr.org (6) 344 2020-12-02T09:52:13Z 2023-03-10T05:09:10Z 2028 5317 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-10T05:10:00Z 782 2374 34.102.187.140
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-10T05:10:00Z 333 229 34.117.237.239
ocsp.pki.goog (7) 175 2018-07-01T08:43:07Z 2023-03-10T05:11:10Z 2401 4900 142.250.74.35
fonts.gstatic.com (2) 0 2014-09-09T02:40:21Z 2023-03-10T14:37:36Z 998 77682 216.58.207.195

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-12 medium alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/k (...) Phishing
2022-11-12 medium alamopublishing.com/assets/css/bootstrap.min.css?av=9e9e5d9b Phishing
2022-11-12 medium alamopublishing.com/frontend/assets/css/style.css?av=9e9e5d9b Phishing
2022-11-12 medium alamopublishing.com/assets/js/bootstrap.min.js?av=9e9e5d9b Phishing
2022-11-12 medium alamopublishing.com/assets/js/knockout.min.js?av=9e9e5d9b Phishing
2022-11-12 medium alamopublishing.com/assets/js/notify.js?av=9e9e5d9b Phishing
2022-11-12 medium alamopublishing.com/assets/js/cookie.js?av=9e9e5d9b Phishing
2022-11-12 medium alamopublishing.com/frontend/assets/cache/f0cf7371/jquery.min.js Phishing
2022-11-12 medium alamopublishing.com/assets/css/adminlte.css?av=9e9e5d9b Phishing
2022-11-12 medium alamopublishing.com/assets/js/app.js?av=9e9e5d9b Phishing
2022-11-12 medium alamopublishing.com/frontend/assets/js/app.js?av=9e9e5d9b Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 167.86.66.22
Date UQ / IDS / BL URL IP
2023-05-21 23:53:48 UTC 0 - 0 - 11 alamopublishing.com/lists/gr691t621ybe6/confi (...) 167.86.66.22
2023-05-21 23:53:47 UTC 0 - 0 - 11 alamopublishing.com/lists/gr691t621ybe6/unsub (...) 167.86.66.22
2023-05-21 23:53:44 UTC 0 - 0 - 12 tracking.alamopublishing.com/campaigns/rv3817 (...) 167.86.66.22
2023-05-21 23:53:44 UTC 0 - 0 - 1 tracking.alamopublishing.com/campaigns/rv3817 (...) 167.86.66.22
2023-05-19 19:27:50 UTC 0 - 0 - 11 alamopublishing.com/lists/ha135t7adg1fb/confi (...) 167.86.66.22


Last 5 reports on ASN: Contabo GmbH
Date UQ / IDS / BL URL IP
2023-06-04 01:44:00 UTC 0 - 1 - 1 5.189.152.56/Ref_NFe_Boleto.zip 5.189.152.56
2023-06-04 00:18:32 UTC 0 - 0 - 2 167.86.112.136/login.php 167.86.112.136
2023-06-03 17:17:07 UTC 0 - 6 - 0 www.smtpchile.com/smtpg/index.php?subid=91853 (...) 178.18.244.106
2023-06-03 15:11:58 UTC 0 - 1 - 2 mail.mnt2-222.news.ofertasincriveisnobrasil.c (...) 194.242.57.217
2023-06-03 14:24:04 UTC 3 - 8 - 0 www.xdfcujgtwseiokbwusedfiushyvbdkrftgfvhwegh (...) 62.171.180.179


Last 5 reports on domain: alamopublishing.com
Date UQ / IDS / BL URL IP
2023-05-21 23:53:48 UTC 0 - 0 - 11 alamopublishing.com/lists/gr691t621ybe6/confi (...) 167.86.66.22
2023-05-21 23:53:47 UTC 0 - 0 - 11 alamopublishing.com/lists/gr691t621ybe6/unsub (...) 167.86.66.22
2023-05-21 23:53:44 UTC 0 - 0 - 12 tracking.alamopublishing.com/campaigns/rv3817 (...) 167.86.66.22
2023-05-21 23:53:44 UTC 0 - 0 - 1 tracking.alamopublishing.com/campaigns/rv3817 (...) 167.86.66.22
2023-05-19 19:27:50 UTC 0 - 0 - 11 alamopublishing.com/lists/ha135t7adg1fb/confi (...) 167.86.66.22


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-11-09 18:41:41 UTC 0 - 0 - 11 alamopublishing.com/lists/cc414kpafa392/confi (...) 167.86.66.22
2022-09-05 16:33:48 UTC 0 - 0 - 11 ris.eventbay.net/lists/jq238cbrxk282/confirm- (...) 147.135.64.35
2023-01-13 11:19:45 UTC 0 - 0 - 8 hello.studioqv.com/index.php/lists/sc396plypo (...) 75.119.141.56
2022-11-22 15:45:34 UTC 0 - 0 - 11 whmediaevents.com/index.php/lists/at198hv77z2 (...) 45.8.225.219
2022-09-26 23:20:37 UTC 0 - 0 - 14 risrae.com/index.php/lists/sc1033ezsod26/conf (...) 188.208.32.34

JavaScript

Executed Scripts (8)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (48)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12947
Expires: Sun, 13 Nov 2022 01:59:44 GMT
Date: Sat, 12 Nov 2022 22:23:57 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5784
Cache-Control: max-age=135822
Date: Sat, 12 Nov 2022 22:23:57 GMT
Etag: "636f75f3-1d7"
Expires: Mon, 14 Nov 2022 12:07:39 GMT
Last-Modified: Sat, 12 Nov 2022 10:31:15 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "ED5C27510100FFC4481BE474EBCB020D147C645BEB110604D5284EEEB8B97C02"
Last-Modified: Fri, 11 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8817
Expires: Sun, 13 Nov 2022 00:50:54 GMT
Date: Sat, 12 Nov 2022 22:23:57 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 12 Nov 2022 21:44:15 GMT
cache-control: public,max-age=3600
age: 2382
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    d130218d0e2841f39c99610fe1a2ab90
Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945
Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: zOVYjFWv6Fbqwx8JjDvlpKsv3BKha3swmzi7/FYxG4EhqMpAwAO1X+KEP7WfcObITpZpFOadNKM=
x-amz-request-id: EFQSKW2SMZ7D0ASX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 12 Nov 2022 21:50:26 GMT
age: 2011
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; path=/; HttpOnly csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B; path=/; HttpOnly
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block, 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size:   1752
Md5:    030dca3f8c96fd8a26b09e6c39b3b2bf
Sha1:   784ac00dc4f81fc9a5e266bc60ba7b3fc6160e01
Sha256: 715d70e54cc7ee5af05b09a92db6c0ec69b0dc7647f5dc3cb086909f8170264d

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sat, 12 Nov 2022 22:23:57 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ajax/libs/font-awesome/4.5.0/css/font-awesome.min.css?av=9e9e5d9b HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alamopublishing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
date: Sat, 12 Nov 2022 22:23:57 GMT
content-length: 4972
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-6b4a"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 13577432
expires: Thu, 02 Nov 2023 22:23:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VPGxmXfcd2ZECQfrqkdeKsr%2FINdWCj08Oj6atTcg3N6WlmbGL5RePDeoB5zrlUW7aIP9cnYim%2FQOgjiV%2FtlQqTqDa9P0VTGAxQqTHeqdDkXTAnbvETklcirUu8xtOUf1YVxH5X5n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7692acd22c901c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (27303)
Size:   4972
Md5:    fb68fcb5e0519fb76559c9ab267f8f3f
Sha1:   b96c07f9ef44dbecb4ec4d1cb4a0b30a210f9825
Sha256: 8d0f29c4b3a8b511e6a46bc29ab3d96566fb244fdca5003156c04ea6b65cdd71
                                        
                                            GET /ajax/libs/ionicons/2.0.1/css/ionicons.min.css?av=9e9e5d9b HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alamopublishing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
date: Sat, 12 Nov 2022 22:23:57 GMT
content-length: 6642
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ea8-c854"
last-modified: Mon, 04 May 2020 16:11:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2092885
expires: Thu, 02 Nov 2023 22:23:57 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ALlmzAmEpCOir4f2e9w9H%2Fg9k3vn8m3h92PB36U1GsOkKSqOL60DGPrYy7YB4CTQlneN27CX4c%2BhehFYiixHP7Cho1LvXqNP2eI2RsdU8W6xOUnDZBrxswq9jHSCK13R4IBneOvS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7692acd22c951c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (50806)
Size:   6642
Md5:    0db2e85f504f65d4eba65a3a3176b99e
Sha1:   49445ca83b52538d5fb8f4ef3c5ed0bee904dc81
Sha256: 0153ed381a818cbc0ddab7d832c84bc3aae2aed1ccbe9821d625d6637046c953
                                        
                                            GET /assets/css/bootstrap.min.css?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:32:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319c3b-18679"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65366)
Size:   17160
Md5:    284e1d568b2a7da4b297a1728b093eed
Sha1:   06a900e1b20c68af158f4e1734100af72642d3eb
Sha256: abc3c286c13cff4efe7e3a637468442416e9a945ac9ce248bcac8699b5966584

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/css/skin-blue.css?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:32:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319c3b-e04"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   791
Md5:    dcdfd461d00fd7b6f41db086c1252e33
Sha1:   01911f5945313ed1bce5a01a51be71253d570bc7
Sha256: fcda6f65c583bef5f70089b5b2fa2c5b9f175b15bf10cdf150938c27ce31189a
                                        
                                            GET /frontend/assets/css/style.css?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:32:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319c3c-3fc6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   2467
Md5:    9fd90fcf7b71eca519fbd1a4552f4a71
Sha1:   e10bc1e81bc6b90c6095295eb3e02867c7e11cd5
Sha256: a59b020f703458a66190250ac67121bfda7109d87d31614a2db4b7b0e09907b2

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/js/bootstrap.min.js?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:32:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319c3b-71b6"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (28941)
Size:   7679
Md5:    18c650acaadcdf582747aea91bebda89
Sha1:   254df0d455514d4888e4906993b3e72d5f56d2d0
Sha256: cd2d43b5075c59279839a156425c64abefa206144a4e7ee4a9c35c1157e1217a

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/js/knockout.min.js?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:32:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319c3b-e9ae"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (564)
Size:   22093
Md5:    4a4fc7c2f6995fadea409096e13e7fc7
Sha1:   734492495fc72d05eebe7a49eb0b76802904c4c4
Sha256: c25598ec2f3396e372ad0a51bce9d2576c3a7a77be014e80679b3009d610c38c

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 12 Nov 2022 22:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/js/notify.js?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:32:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319c3b-15de"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   1230
Md5:    9ebfc48a18f857e2e29756498f0d80a1
Sha1:   166b4a773b5688ddfa37376227ad6a0eb1971b59
Sha256: 6be61c4559e6de59f12bb4e2e51381d1b41eb555262dadaaa3db5bfb39665f4b

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 12 Nov 2022 22:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/js/adminlte.js?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:32:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319c3b-262e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (9373)
Size:   2986
Md5:    d92aa5042a44694e1e5b92039153dbf9
Sha1:   a4caf186151c00eaa9d8d398b6d1877c15f9ecad
Sha256: 5e5fec05f9c57d264a2223ad40688118ef0b11d364f20f7055d7ccb68f18314c
                                        
                                            GET /assets/js/cookie.js?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:32:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319c3b-134a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   1500
Md5:    94f6c24dce4142d9422050d2d7337d24
Sha1:   3c8f7c1c03ca148da6d7fd506f8e468922b18d6b
Sha256: fe445a5d631511d6e58d504434bceb4a007830bb46e9dde7f5e786853229a35e

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /frontend/assets/cache/f0cf7371/jquery.min.js HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:34:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319cbd-1762a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (32086)
Size:   33266
Md5:    ece879ee496f4d73786b4f086d20495b
Sha1:   f0dddf54755394aceb56dc377ab5879015b1b92f
Sha256: 56c5badd7be6180bd27a9a542803f82fe4a4d589b96253add8f187be20117997

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /assets/css/adminlte.css?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:32:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319c3b-33740"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   27891
Md5:    1ce20c340bb00f5bae9c2ec25bdfdf9f
Sha1:   66248bdbd5d71d45ca2e860f0d0f5322aec56baf
Sha256: 25d7a9b0377e552eea49ae78cc8d21978353d7d1299b3c837e8aa1f9aeacf91b

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 12 Nov 2022 22:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/js/app.js?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Last-Modified: Fri, 19 Jul 2019 10:32:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5d319c3b-8a0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   869
Md5:    f2636607a0e643dc07d501d932944de3
Sha1:   91e5b5ccd683fd6cc402ed9501553113bb1f96ba
Sha256: fdcd6d00d7c9c7360f4df2ef037f58d5b840f1b1ea3f93eb009b98b12c35766b

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /frontend/assets/js/app.js?av=9e9e5d9b HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:57 GMT
Content-Length: 469
Last-Modified: Fri, 19 Jul 2019 10:32:28 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "5d319c3c-1d5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   469
Md5:    5154609f598be8d873ff615d521b6d60
Sha1:   55165af84a2129e8432f1e96326ee686a07392bd
Sha256: 0ad96c8bca01a84d8b932da6e7cb095707bce86f4844acd88925b295a7422f2f

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 12 Nov 2022 22:23:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Montserrat:300,400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alamopublishing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Nov 2022 22:23:57 GMT
date: Sat, 12 Nov 2022 22:23:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1023
Md5:    d1c5842830d2dacc8104785768c9d28a
Sha1:   5ec5ff8a1f4c36ae2984e2d44e5cebcf0f36835a
Sha256: 09def2cb4393c7be8f107bc0a8aba1fa7730c355497c00e89421476ed858315a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 12 Nov 2022 22:23:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 12 Nov 2022 22:23:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alamopublishing.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 05:42:51 GMT
expires: Fri, 10 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 232867
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://alamopublishing.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 16:40:18 GMT
expires: Fri, 10 Nov 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 193420
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 12 Nov 2022 21:25:00 GMT
cache-control: public,max-age=3600
age: 3538
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 12 Nov 2022 22:23:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: alamopublishing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://alamopublishing.com/lists/cc414kpafa392/confirm-unsubscribe/fx419mg2ssac9/kj4281989o79d
Cookie: mwsid=c53c25d85ea58830dcbfa5fcee3bf3d9; csrf_token=bcfdbcfce605b3c4b2c82c08a2432c83037fdb0cs%3A88%3A%22dU9heXg4ZmR3YWxHbEFUbUpWTkVOfkdxNnNnbVVOMXWc0dpuTuGBX9f4TMgvwjfhNo-PnZ6wqftxWJJriMaMrw%3D%3D%22%3B

                                        
                                             167.86.66.22
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                            
Server: nginx/1.16.1
Date: Sat, 12 Nov 2022 22:23:58 GMT
Last-Modified: Thu, 14 Mar 2019 11:18:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"5c8a386b-5881"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache: HIT from Backend
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  MS Windows icon resource - 5 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 48x48, 32 bits/pixel\012- data
Size:   6043
Md5:    e76763222a788291014daa83ed72fad3
Sha1:   a893b188c959cc2de1a80f770adc6558dd1befc8
Sha256: d5ec6a825f89bd3e1a5d5e431f0f30fa6b0145f8e7db21852761048e0bdfadda
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4225
Cache-Control: max-age=129199
Date: Sat, 12 Nov 2022 22:23:58 GMT
Etag: "636f622c-1d7"
Expires: Mon, 14 Nov 2022 10:17:17 GMT
Last-Modified: Sat, 12 Nov 2022 09:06:52 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XFwkACvs6VWqSpN1sUXVkw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             35.164.183.116
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: U7eBAPHjze79y4K1uHo5wfgBhI4=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3934
Expires: Sat, 12 Nov 2022 23:29:33 GMT
Date: Sat, 12 Nov 2022 22:23:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3934
Expires: Sat, 12 Nov 2022 23:29:33 GMT
Date: Sat, 12 Nov 2022 22:23:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3934
Expires: Sat, 12 Nov 2022 23:29:33 GMT
Date: Sat, 12 Nov 2022 22:23:59 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "96D8E39EFB6EEBD1413A4BC0FA6800781F636E70DC0CCADF6A546F26FA022755"
Last-Modified: Thu, 10 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3934
Expires: Sat, 12 Nov 2022 23:29:33 GMT
Date: Sat, 12 Nov 2022 22:23:59 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F073ec866-b693-4f96-82bf-76ba051797c9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6577
x-amzn-requestid: b4587cfb-6041-453c-9e74-fa35ecd31448
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMjIGHRoAMF26g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec147-29e7ec741b0e6f6f674aef75;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:23 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xXTQDl3_FLXQOlDxccKFommc_QhKWlNRrZLSq9giQJ0-3qU3ytC6hg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 22:02:25 GMT
age: 1294
etag: "ccc1ec5ebb5090c6255dcb1e8899e95cdd91e12f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6577
Md5:    faa8e3cf2ab3c1d53a1735def5bb7476
Sha1:   ccc1ec5ebb5090c6255dcb1e8899e95cdd91e12f
Sha256: e81a8fa312ec478871427f1d04ba7fe563573c683809153f75dec8df979d6efe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facfcee70-832e-4f2d-8fc7-55d2bfff651e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8633
x-amzn-requestid: 8bdfbfbb-5193-4c62-ba1b-c906f7548676
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhSEC1oAMF8tw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-39b4c2954dbc8e4c40a2c9d8;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: LHmcpSlZ8kkc-41xVBTf34jRhesbWOdR1TWhihNTt2ZcxBAsU0l57w==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 22:04:46 GMT
age: 1153
etag: "2d90ff66079e8ffbaaa367a6bfc08927e7cc424d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8633
Md5:    eac2ed4bece6282c8273a58a88371e2e
Sha1:   2d90ff66079e8ffbaaa367a6bfc08927e7cc424d
Sha256: aea97fd7d90302edcb3e0c08507d682e02166e8ddd4d082fc4f5435af438594c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe8955e1-907b-43ed-a437-d4ad1f5fe742.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5478
x-amzn-requestid: c06e47c6-da2a-4a70-af2a-c1268557b913
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdM67FEEIAMF-pA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec1df-0628d00244323ddf727e0b80;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:42:55 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3zeJU6wVmWDIbVDBlTYvTh8e78isxbmNC0GKWdKqdI5abbdERoyzpA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 18:14:37 GMT
age: 14962
etag: "c76588ccaf97fdfd6e73833083200cb49a01a4af"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5478
Md5:    38e32fc94c445ff47da5d2907e61e3a4
Sha1:   c76588ccaf97fdfd6e73833083200cb49a01a4af
Sha256: e4e3947b2248206c9dacfd35ff5619ca3b3ae56a7bcd565d40ed048839ffa075
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f7d2f5-4807-4bbd-a3db-7a239962aca5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5583
x-amzn-requestid: e844f42a-e87e-4e61-8c97-137c07c5ae28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNeQ9Ho7IAMF5_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687739-62c44d2f7d23632e74895bd8;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FWEdPT057SMVCBc7ZYbPnfW1z5mB7iubIXzrj3HlctKtwRx2PuncSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 08:39:57 GMT
age: 49442
etag: "691f59b65ca9fde4f59bbf96b37071e07351f190"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5583
Md5:    85c6f450b38f41a2fb924d6d9a9cbff8
Sha1:   691f59b65ca9fde4f59bbf96b37071e07351f190
Sha256: c8f877488a2cf65f0d9829384fd4113847722a1b4df94b6b1d5788699689722c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d4e929-d0bb-41b7-bdcd-0e67258b428a.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9012
x-amzn-requestid: 83eac9e7-5387-4e11-9769-182fa3f7fffb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdNC6FxzoAMF80w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec212-5ca277b90a5a9a4c437edc1e;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:43:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: j9tI017IQvan_P0uKJZgQPzjXhIoBon1zOIJxRTzC3mbOEZ0davyZw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 21:52:59 GMT
age: 1860
etag: "0cc22d7bf9092fb30f31e2ca8f242c197b891669"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9012
Md5:    516f1bfefb1c1a737ea2441f85343b32
Sha1:   0cc22d7bf9092fb30f31e2ca8f242c197b891669
Sha256: 733824d4f6f7c5b54ce4e02ecaf152cfc1e10f3f6a801d7e2c55a02460e40087
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe5720fc8-63c5-4f5e-bb64-33809e0069fe.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8953
x-amzn-requestid: 2a2d20f4-3aa5-475e-8ec2-fc569766335e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhQGAhIAMFrjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-26dc0259793ec94814f3d41a;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: OKFzEoCVITStAPxYzhksarrlTkVeATx6AzBnEK32WLFaOeEIwLMu_Q==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 12 Nov 2022 21:42:56 GMT
age: 2463
etag: "fa34520e849bf746ff43aec3d28beb9e4be44f4d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8953
Md5:    f09e254cd6f2e29b3bf198cc5d58a46f
Sha1:   fa34520e849bf746ff43aec3d28beb9e4be44f4d
Sha256: 2e29eace95fd8cb5b6d77df880d2044ecab4206cba47931c3a95e77c1b4e9d9a
                                        
                                            GET /css?family=Open+Sans:300,400,700&av=9e9e5d9b HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alamopublishing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Nov 2022 22:23:57 GMT
date: Sat, 12 Nov 2022 22:23:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i&av=9e9e5d9b HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alamopublishing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Nov 2022 22:23:57 GMT
date: Sat, 12 Nov 2022 22:23:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /css?family=Roboto:300,400,700,900&av=9e9e5d9b HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://alamopublishing.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 12 Nov 2022 22:23:57 GMT
date: Sat, 12 Nov 2022 22:23:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: