Overview

URLonlinepokervidsdirect.info/
IP 104.21.35.70 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-31 06:02:17 UTC
StatusLoading report..
IDS alerts2
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (7)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-30 17:15:40 UTC 52.41.131.197
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-01-30 22:05:30 UTC 34.120.237.76
onlinepokervidsdirect.info (20) 0 2018-06-29 00:13:01 UTC 2023-01-31 02:12:23 UTC 104.21.35.70 Unknown ranking
r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2023-01-30 17:12:04 UTC 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-01-30 17:12:02 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-30 17:40:18 UTC 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-30 17:13:18 UTC 34.117.237.239

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-01-31 06:02:22 UTC 2 Client IP Internal IP ET INFO Observed DNS Query to .biz TLD 
2023-01-31 06:02:22 UTC 2 Client IP Internal IP ET INFO Observed DNS Query to .biz TLD 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.21.35.70
Date UQ / IDS / BL URL IP
2023-01-31 06:02:17 +0000 0 - 2 - 0 onlinepokervidsdirect.info/ 104.21.35.70
2023-01-30 06:10:27 +0000 0 - 0 - 2 greatideaa.ru/ 104.21.35.70
2023-01-06 21:58:52 +0000 0 - 2 - 2 train.caedism.top/ 104.21.35.70
2022-12-24 11:53:52 +0000 0 - 29 - 0 rxasphatalgaxyne.tk/ru/lukoil-bonus/ 104.21.35.70
2022-09-20 23:54:23 +0000 0 - 0 - 7 www.xg9011.com/movie 104.21.35.70


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-21 07:36:41 +0000 0 - 0 - 1 pastebin.com/raw/PXuJ2cR6 104.20.67.143
2023-03-21 07:35:56 +0000 0 - 0 - 1 pastebin.com/raw/ypjfsHkY 104.20.67.143
2023-03-21 07:35:53 +0000 0 - 0 - 1 pastebin.com/raw/xxJcr1F2 104.20.67.143
2023-03-21 07:35:51 +0000 0 - 0 - 1 pastebin.com/raw/ws7gGjLT 172.67.34.170
2023-03-21 07:35:38 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/84304248834831 (...) 162.159.130.233


Last 2 reports on domain: onlinepokervidsdirect.info
Date UQ / IDS / BL URL IP
2023-01-31 09:26:29 +0000 0 - 2 - 0 onlinepokervidsdirect.info/ 172.67.215.59
2023-01-31 06:02:17 +0000 0 - 2 - 0 onlinepokervidsdirect.info/ 104.21.35.70


Last 2 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-31 09:26:29 +0000 0 - 2 - 0 onlinepokervidsdirect.info/ 172.67.215.59
2022-12-27 07:18:09 +0000 0 - 2 - 0 www.shkola5.ru/ 188.114.96.1

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (38)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 31 Jan 2023 06:02:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: referer_default_cookie=default; expires=Mon, 30-Jan-2023 16:06:57 GMT; Max-Age=10800; path=/
Last-Modified: Wed, 09 Nov 2022 23:56:00 GMT
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fnB9Jsp3jZzRzf4tRfgFR0RfOAZhF5I9UCjOBl655nMGEAyOesd3w9%2BqS32uZJAQ7dfm8d50Gt6tP7urClzYXnfrce1BUs7FnpZT3Y6ejkaKrsGKgRlLl%2F9n30GqRdbwmG92H8zMwWMo%2F3UVhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79203c9118a5b51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (698), with CRLF, LF line terminators
Size:   15743
Md5:    3adca70d0414e2ba0890689383e8082f
Sha1:   398d452ee9df6f14d40a9e80b4cad042d4ef15c8
Sha256: 710e00f36a48885839d36c876ffc4a9ab6ef40fe9a8a37b15c37825d0f03996c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C085CF277DD0429FE15E4A4BCE5595636E9F2204D5A8E77220F8BF88ADF4068F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19362
Expires: Tue, 31 Jan 2023 11:24:49 GMT
Date: Tue, 31 Jan 2023 06:02:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4903
Expires: Tue, 31 Jan 2023 07:23:50 GMT
Date: Tue, 31 Jan 2023 06:02:07 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 05:43:17 GMT
age: 1130
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10668
Expires: Tue, 31 Jan 2023 08:59:55 GMT
Date: Tue, 31 Jan 2023 06:02:07 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: wqlKiSztcU6b25nHqkj82NzfNfwAYz177REE3WZlseNmwaiDsqLTNFVGDXl4ygAYTcBayxd5a04=
x-amz-request-id: E0FH0XK2GHC63ARG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 05:22:05 GMT
age: 2402
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /wp-content/themes/35512/assets/dist/style.css?v=1.0.01675084017 HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 20 Jan 2023 11:47:08 GMT
ETag: W/"63ca7f3c-29e8"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 59278
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fe5HTIAfSw%2FfzPubOz7BiyNsv%2B%2BgxM%2Fb9BZISlw0h9DkC4EyraPAMuikHRAK06Gqiw6FRLOXlvDaBs%2BVCdgZVwsO8NSmj0dfGDyA6nYL%2FkdTF%2FNZkc97buV0w6RzL4BjMz1t1DOBuTz4kQ6Hvw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93bad5b51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (10727)
Size:   2484
Md5:    5da4594f693f734fc069196d1a65879b
Sha1:   965cafb0410de273d5de84326d98f06d0bef1550
Sha256: 79c805ce6ae691e109c3bbbdd1c3a8b7d4a8674c2c92bdb0dcae9624e8acfcf2
                                        
                                            GET /wp-content/plugins/custom-page-cache/public/css/custom-page-cache-public.css?ver=1.4.1 HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 10:23:47 GMT
ETag: W/"63d254b3-62"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312613
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OXXKUPrZ6%2B3m6PVPSMreUSYyp9IbcZb59RpWqlow2gHJ7adpEfNshfabKvQc607SDrWndtJhNl5exUUBIKFI50u%2B1W6dpcOXdG5E%2BLrfgfvoDcVmthjxbwbuE1dmz5G6SKea%2Bl0dlLe8MB8%2FNw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93b92c1c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   105
Md5:    db00954ab1d34aed4721e781a9363feb
Sha1:   2aeddaf6c7b8bae7525974e3f627c9e4aeb021a6
Sha256: 539d9b96870c22ccaf0465b154e95faff2da03d1437050027ccd19ca269338cc
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 31 Jan 2023 06:02:07 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /wp-content/plugins/custom-page-cache/public/js/custom-page-cache-public.js?ver=1.4.1 HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 10:24:42 GMT
ETag: W/"63d254ea-346"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312613
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GtFfXBNigQu3zwtOAFJzGiUVZ%2FGQUXr6e7BwOlTcVdeW65qYDjP%2FTeqlKmPVHM4%2FJqCR3%2FgQtUHIzq%2B3b1YRba11fyq5WN8aqNih5vV%2BurjURFd4U2ugGsopnjUsednM0qS8%2FviB7xxKCxC8jQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93bdcfb4f3-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   475
Md5:    f18f244bed87a1ae2819af17fb2766cb
Sha1:   07add1b1b35612815df2f7a491dff60ab34507f5
Sha256: 8b772d78e109484da06c428e7c6f3de1ab9f9128313cad7be43088c2a70d7755
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 10:24:39 GMT
ETag: W/"63d254e7-15d98"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312613
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UjY%2B0of3WOKqnaIbo4nGqslhKGX6Rg%2F0Q%2B4xnVw8mXhSLdooSrFxe77cFeVru44vrRAUsnW4POy4abodYuTCwCBhVoiIIFiML2fvTAGNT%2Fr3OVq4DhrRSKQUbieh3umSIKcVDUq1HjT2%2FgbHEg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93b9adb4ed-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30908
Md5:    de51a7f2c2c244ceb7103216144f03dc
Sha1:   9545e4547e01b6fcabebdfa08c2d75089808fbee
Sha256: 10b58517301b7a47ed1354030c9b652a1d96259d24e1e1b4c4b1aa33b94682ee
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 10:23:44 GMT
ETag: W/"63d254b0-2bd8"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312613
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mBiiOyNM5ztALcFt0S9dombNmWoDKeBmVf0AngehZgi9XrBfla6CbWbujfb6uwE%2BXEMnWENhk9G1v%2BFxwylJioEV0rNyGrsoZzzV8gF7WoUbdOFjAO82Yf%2FJgU7b1gFkfRZStuhyImDhPl3qEw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93bacfb524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4165
Md5:    0d5bb2a36d1fc2e095235bc201eb5579
Sha1:   98f0154e2ed5322a9f65077f954868d6c800b337
Sha256: fe6382620c35c12aa4f3f96fe395e5813defe330c1d95fd3de1e94f8f5d1f0a5
                                        
                                            GET /wp-content/themes/35512/assets/dist/app.js?v=1.0.0 HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 20 Jan 2023 11:47:08 GMT
ETag: W/"63ca7f3c-ca5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312613
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r8kftuVJPtSME8CYm4NLZrLLpHe39mayJPghqBvINXxAvtzH8UBA0%2BrhGzmOzD%2BCSq5%2Bd0kB0isw%2BCHaTsxMZMrE38xjlxrNpadEKhDaJHTJTZ%2FxjdgEtUX1arTKKNWNVFtT3uY8UXCDUWPgwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93c9b7b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (3237), with no line terminators
Size:   1403
Md5:    248636268a416f46ed59d166c1226466
Sha1:   0ff29169254c18e8b2332220edc7c7179b21370f
Sha256: 923ace4a95762fb56bc55ba4932bd5da74438e75473810d1a7d7135a57a7012b
                                        
                                            GET /wp-content/plugins/ttgambling-geo-apk/admin/css/public.css?ver=1675084018 HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 13:05:56 GMT
ETag: W/"63d7c0b4-a0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 60910
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jMHKtlVhmfMnZAz89%2FqLIota8mufjsH0ENJIjGwAZ33UMlHraztBUvCbEO28RpUde%2B6pnp2YKB3Ox6hIspTpNjRIEY4foHMtPFVDMvVlB26IMxg%2B3LgVpprjXHiyZoT6xWNlbm3TcccjSj3GKA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93cae0b51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   125
Md5:    1809f5150a4a6a544ad46e59f69ee3a1
Sha1:   a84e6ba47ad10a25062a2183231cbbf54c1cde79
Sha256: 81cb83c71a815b5b4bcb4cd87bf4a5de7f83059ad1247711c944ee0301702ce8
                                        
                                            GET /wp-content/uploads/sites/35512/2.jpg HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Content-Length: 4464
Connection: keep-alive
Last-Modified: Wed, 20 Apr 2022 10:05:26 GMT
ETag: "625fdae6-1170"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312587
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gi4mY9WdvjNSgYc%2FeTpRYO7J8DkjUynaA7Due7CAwm27rWPnqFgbABiqsDp%2FMcSbuBoimaPvnO5HDM9k0wkTH5G0OLgkcVTiIc5LpPb%2Fw%2FGAmZ6EODO4kz1ezmMJoBi9waNFfNWBFLtVEDhIiw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93d9c7b50f-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 301x233, components 3\012- data
Size:   4464
Md5:    ca8b77ee0eda6176880bfe9bf0c7568f
Sha1:   0b8d85836888220e03347ad950947097f9e951bc
Sha256: 59bc0d3dc610c87ad1657354bc0fae557b9e3e054053609c52acb1337bb3b186
                                        
                                            GET /wp-content/uploads/sites/35512/1.jpg HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Content-Length: 7188
Connection: keep-alive
Last-Modified: Wed, 20 Apr 2022 10:04:59 GMT
ETag: "625fdacb-1c14"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312587
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UzowqiQLzKEJnsC1TzcLkxPb%2BZk1j4XuwqKUXsap3oQgKLAK6AbMOnTFNwUshyowYWT9%2Bgxs3mAlBCNRPMZg2tmxkd%2FSWHSXwBmvATZZEXgH27QO73DgTMJ7PhOmhFQ8vbSyEo9pCVi5uyj%2Ffw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93daf0b51d-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 157x53, components 3\012- data
Size:   7188
Md5:    069e11fdf6afb5340ca6e0c9c7a1cbb9
Sha1:   f5274ecf585698211cf0ab7a5a89088ab83a5aea
Sha256: eec2048d97c57390126bca68efbf87ffdfd361c2f9fb264ad85652caa2aaf9e6
                                        
                                            GET /wp-content/uploads/sites/35512/3.jpg HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Content-Length: 9732
Connection: keep-alive
Last-Modified: Wed, 20 Apr 2022 10:05:48 GMT
ETag: "625fdafc-2604"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312587
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=26nJDAJXw%2BO0cXzgsULupy4zmdUjaVxB3sea2CeNJiNjz%2F5U%2BIl9AXzyYiSwcwTJ4ZfrMzK2d9T7XDiL4leehIrRs15K3qJ6HIJ%2BmEQ%2FhLSoJ%2FVV4yNwoX3QY9ZtNSeL648FPnz28sb%2FNuXMOg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93d9c3b4ed-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 387x326, components 3\012- data
Size:   9732
Md5:    92b722862f26f2601890e2b5df875729
Sha1:   067e23a5d136d2d1c4d7b82a15f9b6bc9baf20fa
Sha256: 4e0584b6cf88e9acc5c42db33501867b043473574ae2780a320d44b207ca64a2
                                        
                                            GET /wp-content/uploads/sites/35512/4.jpg HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Content-Length: 2635
Connection: keep-alive
Last-Modified: Wed, 20 Apr 2022 10:06:12 GMT
ETag: "625fdb14-a4b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312587
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I4dXdwKfBZuTTV0Twwq%2BArRwS2KBat6Es1aeIRkP1ro3FX1T5srNe4yTCnNlmcGhYLdhyuh5P4ORQLs59sA4D3HyRJlLMSnbDysBs2JxzJVNbpb8WKvrWdc9tqX%2F6rmYFhFYk656e%2FwYxXAi3w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93d9421c0a-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 316x80, components 3\012- data
Size:   2635
Md5:    39cb9617ea894ed7e3f4cb7a89fcc530
Sha1:   2e94e342ab3a7f37bc7958e7fc5a75b401cd5014
Sha256: f72e5a6c4a9ca49c17fb799cb47c1321c0a1d96f0d0f04e6764e65ba54c70bcd
                                        
                                            GET /wp-content/uploads/sites/35512/7-e1650450298348.jpg HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Content-Length: 65973
Connection: keep-alive
Last-Modified: Wed, 20 Apr 2022 10:24:58 GMT
ETag: "625fdf7a-101b5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312587
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hikxLERcpueSm%2F28SDV4MvnWkfV4%2FIePGUoXE42CqXkbHFagVM8cX%2F6juBueEhg%2B0TrlOks1v0rnKNzDPJeRAwkf%2FDwmKd3v0PwwxWbPnrFnp%2BIj2MpcAyjF8uIrIPztvOSazrabqljPvmIcyw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93daf1b524-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 800x259, components 3\012- data
Size:   65973
Md5:    7f36c9dbb6e146008a765b3c6c79d2cf
Sha1:   c75fb6114f503ea9f997b9279e52f697916cbf2e
Sha256: 18076508d2fefc14e217cadf23174b9f4bb1b7c928ce0363eadff7fb2a160c3b
                                        
                                            GET /wp-content/themes/35512/assets/img/bg.webp HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: image/webp
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Content-Length: 32312
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 13:06:35 GMT
ETag: "63d7c0db-7e38"
X-Frame-Options: SAMEORIGIN
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q47kZbZ3Z05Z2X3M36vWXPo%2FHvmkKrWWqqDjC%2FVzo93p4oGOMXlmvFXaEjdHZ891Q4L88kZP9yuNqmxXaW%2F%2FLvnTVvOs0qkunR1%2BgV2vluHEjcAnKko4lk0DL00U%2FSLXzIHX%2FVKb77KlTXbfWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c93ddeeb4f3-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   32312
Md5:    b96f50020e8a52d074985c5acbc1c78d
Sha1:   a8f0c931aa7b8a117853d46c8a1979958104565a
Sha256: 4e16730918cebccd7e88827394277914d658c52e91484dcd94158feac6752b06
                                        
                                            GET /wp-content/themes/35512/assets/fonts/nunito-sans-v11-latin_cyrillic-regular.woff2 HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/wp-content/themes/35512/assets/dist/style.css?v=1.0.01675084017
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Content-Length: 22572
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 10:25:21 GMT
ETag: "63d25511-582c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312587
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5bJ9uftcfpKWxgaMLqRkJKEnIsLMeN%2Bgo3yMoT7dK9CSxmAsUNcOCXPE%2F9LHfV8uNOPKqMpSPlv3lCCl5wQ4MIXf3OE3Be5ZenhLrGfA4GjnRV3TNMI1FnfneCWa%2F%2B9pt93D97Q6VUR0qvO83A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c948b8ab524-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22572, version 1.0\012- data
Size:   22572
Md5:    e79346157f9a2cae4a3295546a6c4a68
Sha1:   d267a1e9ed2bf996e4027344f36310d9a1b0b999
Sha256: 82ab85ea92c8ef28e953494076d9048b50d06b86533ce5e33b6c000746e046b6
                                        
                                            GET /wp-content/themes/35512/assets/fonts/nunito-sans-v11-latin_cyrillic-800.woff2 HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/wp-content/themes/35512/assets/dist/style.css?v=1.0.01675084017
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Content-Length: 22932
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 10:25:21 GMT
ETag: "63d25511-5994"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312587
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8k206z7GLWcFSwnGzaet9RGCJIdwO1nZtUm39QiHt2VqZhMgeGmokhyyEe3H7g%2Feen6vruqgMDc0ZGtQWPxn3dFKhjNnoil8tNMeoy7QfbwQwyX0c%2BdgfWQo1klfi3PX31wBZkUU%2F5Dxt5VhGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c949e76b4f3-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22932, version 1.0\012- data
Size:   22932
Md5:    88a0800ffa8a572180eaf65edacf8a96
Sha1:   34cb791a5859bd467b386a0376f53bfdf0ac19f4
Sha256: 9272605f9c6e6ce39917bdad7d3084d596155036949cde48dac039e3d43b2df8
                                        
                                            GET /wp-content/plugins/rocket-lazy-load/assets/js/lazyload-10.11.1.min.js HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 10:24:43 GMT
ETag: W/"63d254eb-fda"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312587
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ewPwdq3wFXeJbsb35A02B7EwNm1DhIAwJRYJRQoUNF%2B5GbRRMaA6298JpuMAMnoKPv%2FCo8rIZrYuCPmKmBmM70IJthzsgCMQQtMa7urXc%2F6NxZ1tmvfNEqVMJAUzVDEhWMkNv8RBahVHNcIAJg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c94ebcdb524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (4058), with no line terminators
Size:   1646
Md5:    4d84a3594141973b03038bc72b0a3087
Sha1:   0ad648edeaf65d77ed0b2c8a6918fb2c26d58aaa
Sha256: ecec02e9945c99897f4711b8f7dd1b43274070a5b39380dd1588e1fd7e5b9908
                                        
                                            GET /wp-content/uploads/sites/35512/cropped-favicon-192x192.png HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Content-Length: 2613
Connection: keep-alive
Last-Modified: Tue, 05 Apr 2022 06:32:42 GMT
ETag: "624be28a-a35"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312587
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8lqoDizICqv1DYO1K0p4pgCoi1KOYuAnCUFbbJBKMY79Of0kx6He1ngdZc0Rd72jIhY7mFDcapkrNDqgWQWn44RfEbkPo6wNgQfW2GaLHhCj9y4Ko42bP766G6aaUw9SHt6%2FZKiP78F5PG6dsg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c950bddb524-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data
Size:   2613
Md5:    d103f17aa9c7da37889ab1cc7875ee8d
Sha1:   44f92386fa0e7e887537d4172ce300374ef82f85
Sha256: d09529db3e9130fb3a5e00a6c87e49da8bef26cbe08ca9d6a82fc7437bbf4b57
                                        
                                            GET /wp-content/uploads/sites/35512/cropped-favicon-32x32.png HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Content-Length: 669
Connection: keep-alive
Last-Modified: Tue, 05 Apr 2022 06:32:42 GMT
ETag: "624be28a-29d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312587
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o00%2BxapNeer4UDwS1E9BWCngFbT3NwqoZ6qPj9L9NsokZRWZskpGD6O7QQwKAeHL7GfZgp4J8mGbQ5q0lyfqxB%2FQYIDiH7tiYMyhdIrj0hdnsH8SFKxWVU4Q7mm1AIQ3TwrVRHfZYJfAUvVXpA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c950f25b4f3-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   669
Md5:    f7864495a4fd912c6b90e6564527e18d
Sha1:   28815ff879863400aa88cac57825630be0214280
Sha256: 589882c9a90b31f43f5439705e1c5109ce90350dde28943a476cee46d81f0c20
                                        
                                            GET /wp-content/themes/35512/assets/img/logo.svg HTTP/1.1 
Host: onlinepokervidsdirect.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://onlinepokervidsdirect.info/
Cookie: referer_default_cookie=default

search
                                         104.21.35.70
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Tue, 31 Jan 2023 06:02:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 26 Jan 2023 10:25:21 GMT
ETag: W/"63d25511-13c9"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 312586
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U4AWmI4cnU2AHVzTcXbXHdw6SK7XBnlNyEsI0aOil80RPIVaYMmU0xRa7Z5NZaOtn7%2FKx26Xws0blS4TrdcNw3MmM3xQrtNuK54GbpweRMUbqM7Ku3cHDSZp6tdh7RWaIR1TqIOMDyn3dYY2Lg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79203c954c3ab524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2220)
Size:   2096
Md5:    88642507175a102777ec04a73d2d86e6
Sha1:   d4607530318258e223885085d5f5a2ba8c63f402
Sha256: 6d634085927dedfeec0da778ed7e3edffcaf0ec535bb6381736df06eb9834820
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 05:49:04 GMT
age: 783
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8903
Expires: Tue, 31 Jan 2023 08:30:31 GMT
Date: Tue, 31 Jan 2023 06:02:08 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cMtAAUt6wboYDoZHmfbLiA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.41.131.197
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: torR8qErP/+SKDuTw+zUUZ+x7OA=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3650
Expires: Tue, 31 Jan 2023 07:02:59 GMT
Date: Tue, 31 Jan 2023 06:02:09 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3650
Expires: Tue, 31 Jan 2023 07:02:59 GMT
Date: Tue, 31 Jan 2023 06:02:09 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3650
Expires: Tue, 31 Jan 2023 07:02:59 GMT
Date: Tue, 31 Jan 2023 06:02:09 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b003bbe-42d9-4014-8fbe-ddff072cc8b4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5903
x-amzn-requestid: f6fca787-17c1-4edd-9ab0-a00e2fccc7a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboufGeSoAMF-1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d487f6-58be6bdc5e3e767e1ea47b86;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:27:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tAR5c5rQD0h5YZ6TU8pZKhUFUf5d0-l794EaYnwwkts3QXPhdYm6vA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:03:25 GMT
age: 32324
etag: "7ccefd66211d249ae5266c3b6ae3375a19e5cb6d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5903
Md5:    42a648f9d34d8fb703f0b80a52e0deec
Sha1:   7ccefd66211d249ae5266c3b6ae3375a19e5cb6d
Sha256: a57f8792e8caa2a31045a141d019f53f51b633d5d04baebdae97387740c6639d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e3fb86-3315-41fd-97cb-ac82604d8869.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8558
x-amzn-requestid: 2841cd36-22e6-4ecb-b56a-bfadce3197c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffB_BFA8IAMFyvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e393-3fd03bd14de762b0738a3b0a;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: R29JYq4Z8V_Xuq2no0bKxk1K6h2PmTO5OSxzMa4zppDVk3j9rO9aTw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:24:36 GMT
age: 9453
etag: "04577ad69ee9749b14382254eb5bbf0e1edcd7fa"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8558
Md5:    e6f9ffb8f9e99229b45ca5fdb84ce7d5
Sha1:   04577ad69ee9749b14382254eb5bbf0e1edcd7fa
Sha256: 6111acf3f363123b39d13cd3d23ab39b8c8d00379874f19231d1cd3da17c52c2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Gif_csWkacU59D_hnOrJpK6u2aPI8Ylf2JyQEJZ2RLNMCrXSmmMa9w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:56:35 GMT
age: 14734
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9987
Md5:    2c4934be94898028e2ab696561b51462
Sha1:   6cf734e2d29938688913daacfb75506d8e004a94
Sha256: 239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11129
x-amzn-requestid: 74f2a4dd-7d5d-4839-90a8-d2e74f6d785d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffDBZGRPoAMFedg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e53b-3de444596550bb41188ada5b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:17:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9Fga247EZZqiGmdMJ72resdBZR2KLgflGDBPESmuw9cFVs4hSzMzTw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:50:52 GMT
age: 7877
etag: "8e315ac5856967286eaa8769e081d827fb4ca39e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11129
Md5:    2797bfd35b7ec24888de84be14f7f2ec
Sha1:   8e315ac5856967286eaa8769e081d827fb4ca39e
Sha256: b99f3bd73eb4395194bc7bb6a1b801750182239e5b70f3207f99e494b60b72ab
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13639
x-amzn-requestid: 8131c878-620a-4972-ba8f-1456859acae2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcJSF0SIAMFe1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340a1-18c7280940d508c440c0182c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OFj4AbDH4lzjvVDWwf3LiOBXTbUz8MkZlj4-ZYqg_xCHmcpYh0tpVQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 06:29:36 GMT
age: 84753
etag: "e8868de34c2f79348c1edad764259eb70bebd7a6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13639
Md5:    63486f2a937aa8fd013fc2c2d1b32f2d
Sha1:   e8868de34c2f79348c1edad764259eb70bebd7a6
Sha256: fa6e5ce374031c0df3b3f2d6de823cf1fe08fdaf9957a0722770867cfdec0ed1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 00:33:02 GMT
age: 19747
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9600
Md5:    3366ef4f8733cb9c89a5c88f63a0a441
Sha1:   7da46843b6d885f38a4759a08e6c899906ab7b97
Sha256: 7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a