urlquery - report: sewbkbwabq.duckdns.org/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-10-19 04:54:37 UTC	34.117.237.239
push.services.mozilla.com (1)	2140	2015-09-03 10:29:36 UTC	2022-10-19 05:31:31 UTC	54.191.222.112
ocsp.globalsign.com (3)	2075	2012-05-25 06:20:55 UTC	2022-10-19 04:54:24 UTC	104.18.20.226
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2022-10-19 16:28:52 UTC	34.120.237.76
ia.51.la (1)	59607	2017-10-31 08:01:51 UTC	2022-10-19 09:51:10 UTC	103.143.19.103
sewbkbwabq.duckdns.org (10)	0	2022-10-19 08:11:06 UTC	2022-10-19 21:33:59 UTC	45.86.77.51	Unknown ranking
r3.o.lencr.org (7)	344	2020-12-02 08:52:13 UTC	2022-10-19 04:54:36 UTC	23.36.77.32
firefox.settings.services.mozilla.com (2)	867	2020-05-27 20:08:30 UTC	2022-10-19 19:55:33 UTC	143.204.55.36
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-10-19 05:40:54 UTC	34.160.144.191
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2022-10-19 16:02:19 UTC	93.184.220.29
js.users.51.la (1)	53024	2012-05-30 15:10:11 UTC	2022-10-19 09:33:01 UTC	103.143.19.103

Date	UQ / IDS / BL	URL	IP
2023-01-18 07:16:34 +0000	11 - 14 - 0	hvkklkltkm.duckdns.org/	45.86.77.51
2022-10-28 17:36:16 +0000	5 - 0 - 0	jfjocbdubi.duckdns.org/	45.86.77.51
2022-10-28 13:05:32 +0000	5 - 0 - 0	bkvhxekvpp.duckdns.org/	45.86.77.51
2022-10-22 20:41:50 +0000	5 - 0 - 3	lgglldnvew.duckdns.org/	45.86.77.51
2022-10-22 20:33:53 +0000	13 - 0 - 4	fhggdpeiqp.duckdns.org/	45.86.77.51

Date	UQ / IDS / BL	URL	IP
2023-01-31 10:14:32 +0000	0 - 4 - 0	ocntugieua.duckdns.org/	193.187.128.159
2023-01-31 08:43:01 +0000	0 - 0 - 1	nbzxvcvauy.us/	45.88.171.163
2023-01-31 08:29:31 +0000	3 - 6 - 1	eyuwptzoik.duckdns.org/	45.12.138.161
2023-01-31 07:41:50 +0000	0 - 6 - 0	womkyaigbb.duckdns.org/	45.88.168.186
2023-01-31 07:20:51 +0000	0 - 4 - 8	winprizehere.life/?u=kcdweky&o=cawpazh&cid=ml (...)	194.110.247.242

Date	UQ / IDS / BL	URL	IP
2022-10-19 21:34:14 +0000	11 - 0 - 0	sewbkbwabq.duckdns.org/	45.86.77.51

Date	UQ / IDS / BL	URL	IP
2023-01-22 08:24:34 +0000	30 - 0 - 16	omaalqiion.duckdns.org/	45.12.138.144
2023-01-22 08:21:53 +0000	30 - 0 - 16	myhrkoqavq.duckdns.org/	45.12.138.144
2023-01-21 21:22:12 +0000	30 - 0 - 16	alcsewvqdk.duckdns.org/	45.12.138.144
2023-01-21 20:00:12 +0000	30 - 0 - 16	jiqegntptc.duckdns.org/	45.12.138.144
2023-01-21 18:39:32 +0000	27 - 0 - 15	omaalqiion.duckdns.org/	45.12.138.144

Request	Response
GET / HTTP/1.1 Host: sewbkbwabq.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: sewbkbwabq.duckdns.org/ FQDN: sewbkbwabq.duckdns.org IP: 45.86.77.51 HASH: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a 45.86.77.51 HTTP/1.1 301 Moved Permanently Content-Type: text/html Server: nginx Date: Wed, 19 Oct 2022 21:34:03 GMT Content-Length: 162 Connection: keep-alive Location: https://sewbkbwabq.duckdns.org/ Strict-Transport-Security: max-age=31536000 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 162 Md5: 4f8e702cc244ec5d4de32740c0ecbd97 Sha1: 3adb1f02d5b6054de0046e367c1d687b6cdf7aff Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a Alerts: urlquery: - DynDNS domain detected
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 1a500079242f4472c1e8dafd352c6c6078a7228a1993208d2fe1e27dd00644ea 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1A500079242F4472C1E8DAFD352C6C6078A7228A1993208D2FE1E27DD00644EA" Last-Modified: Mon, 17 Oct 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5111 Expires: Wed, 19 Oct 2022 22:59:14 GMT Date: Wed, 19 Oct 2022 21:34:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 66155b620c27c14aced991b34be0d1a0 Sha1: 2d489f39edc932199e2d8e03b40c1a5c95b993d2 Sha256: 1a500079242f4472c1e8dafd352c6c6078a7228a1993208d2fe1e27dd00644ea
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.36 HASH: c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6 143.204.55.36 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff Cache-Control: max-age=3600 Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Wed, 19 Oct 2022 20:51:41 GMT Expires: Wed, 19 Oct 2022 21:17:41 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: n55P2oiF3J1FNxOkajjFkpJoOnxwPy2bvXQ-vaDRhAjsEPhQteMM0Q== Age: 2542 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: bdb8b66c705a7b996496d780f50c00b5 Sha1: 403ae92039fcc933870f51f913f78ccaf9652256 Sha256: c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0d1b73b2a228fe76bf14688e603741025a40803971e05570f873b28788334b33 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0D1B73B2A228FE76BF14688E603741025A40803971E05570F873B28788334B33" Last-Modified: Mon, 17 Oct 2022 14:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11962 Expires: Thu, 20 Oct 2022 00:53:25 GMT Date: Wed, 19 Oct 2022 21:34:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 533e1d53f291993ed5886f88a85c6e55 Sha1: eb4396e8422f71168d32ac6ff3ef49496f625e62 Sha256: 0d1b73b2a228fe76bf14688e603741025a40803971e05570f873b28788334b33
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: yAIAP9KP5hQMG4XLeOK8gQuCDAiCM8zn4OOzHui5GYf/n0fFwXYqy47bZlqYgBACcJ8hmgLmC0w= x-amz-request-id: T4142QHA0J5CRHH4 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Wed, 19 Oct 2022 21:04:24 GMT age: 1779 last-modified: Fri, 30 Sep 2022 18:50:55 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 67d5a988edcda47bc3b3b3f65d32b4b6 Sha1: d4f0e0da8b3690cc7da925026d3414b68c7d954f Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 428039e29152eee1b88005ab85fb09c23ead9c174ef6b408289a39a4d69bd819 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "428039E29152EEE1B88005AB85FB09C23EAD9C174EF6B408289A39A4D69BD819" Last-Modified: Wed, 19 Oct 2022 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=19890 Expires: Thu, 20 Oct 2022 03:05:33 GMT Date: Wed, 19 Oct 2022 21:34:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: a49301bb02deb120ba2333d59a0d8753 Sha1: cf094c4e4a60eff70c5772e13017d94423cc281f Sha256: 428039e29152eee1b88005ab85fb09c23ead9c174ef6b408289a39a4d69bd819
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Wed, 19 Oct 2022 21:34:03 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.36 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 143.204.55.36 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Cache-Control: max-age=3600 Date: Wed, 19 Oct 2022 20:43:40 GMT Expires: Wed, 19 Oct 2022 21:31:34 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: i9X9HBj8JYLPJZrO0KCj0akvko8vlogk9DhqOY47GzMSC3gZE2CvMQ== Age: 3023 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET / HTTP/1.1 Host: sewbkbwabq.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: sewbkbwabq.duckdns.org/ FQDN: sewbkbwabq.duckdns.org IP: 45.86.77.51 HASH: fe6b659e109271803f29354e0286fa64e4f285be853181f7371fd875027b769c 45.86.77.51 HTTP/2 200 OK content-type: text/html server: nginx date: Wed, 19 Oct 2022 21:34:03 GMT last-modified: Wed, 19 Oct 2022 15:05:17 GMT vary: Accept-Encoding etag: W/"6350122d-1727" strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 2886 Md5: 6c089fb1620d9a748520f4bf6dda8291 Sha1: a61eaa34240fed4fb558b618bab69334e73c009e Sha256: fe6b659e109271803f29354e0286fa64e4f285be853181f7371fd875027b769c Alerts: urlquery: - DynDNS domain detected
GET /static/gs_vk/index.css HTTP/1.1 Host: sewbkbwabq.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sewbkbwabq.duckdns.org/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: sewbkbwabq.duckdns.org/static/gs_vk/index.css FQDN: sewbkbwabq.duckdns.org IP: 45.86.77.51 HASH: de36d3e9e989de40ae0bf5252af018ef55fdc0ed938042bdba11147f1127e431 45.86.77.51 HTTP/2 200 OK content-type: text/css server: nginx date: Wed, 19 Oct 2022 21:34:03 GMT content-length: 748 last-modified: Tue, 09 Aug 2022 08:07:50 GMT etag: "62f215d6-2ec" expires: Thu, 20 Oct 2022 09:34:03 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 748 Md5: 91692497e479f6cc955e4de6d627a499 Sha1: bb57de5c2d4dafee21f66645d776d3064f4b79bd Sha256: de36d3e9e989de40ae0bf5252af018ef55fdc0ed938042bdba11147f1127e431 Alerts: urlquery: - DynDNS domain detected
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 1d0de3a88ad67da5ba748190f997994299058b77fff93caa24f4c611b3dec560 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 198 Cache-Control: max-age=124561 Date: Wed, 19 Oct 2022 21:34:04 GMT Etag: "634fb017-1d7" Expires: Fri, 21 Oct 2022 08:10:05 GMT Last-Modified: Wed, 19 Oct 2022 08:06:47 GMT Server: ECS (ska/F717) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 62fc1aa250922e13956facbf8071aebb Sha1: 111e2978b9e6931f7ba9ee3beac67d1af7bf8c92 Sha256: 1d0de3a88ad67da5ba748190f997994299058b77fff93caa24f4c611b3dec560
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: d4ttzGI1hDwjqvxo0uPc8A== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.191.222.112 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.191.222.112 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: glyJWGwhXZ4nI0m3xkATk9UTAEc= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /gsgccr3dvtlsca2020 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/gsgccr3dvtlsca2020 FQDN: ocsp.globalsign.com IP: 104.18.20.226 HASH: 687186b593ba430cb2e3db75a07bdd463cae2d01ca0c50e7ee9deb787db87fc9 104.18.20.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 19 Oct 2022 21:34:04 GMT Content-Length: 1414 Connection: keep-alive Expires: Sun, 23 Oct 2022 18:19:00 GMT ETag: "f930e10b880660f8357c8fe1ea456f994e93baa3" Last-Modified: Wed, 19 Oct 2022 18:19:01 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 1669 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 75cca2bea87eb509-OSL --- Additional Info --- Magic: data Size: 1414 Md5: 11c35b4b0b1d6ac2ce961331588c0b6f Sha1: f930e10b880660f8357c8fe1ea456f994e93baa3 Sha256: 687186b593ba430cb2e3db75a07bdd463cae2d01ca0c50e7ee9deb787db87fc9
GET /21240581.js HTTP/1.1 Host: js.users.51.la User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sewbkbwabq.duckdns.org/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: js.users.51.la/21240581.js FQDN: js.users.51.la IP: 103.143.19.103 HASH: 07d02a0148b6511022ea5ba02eab78bf74dc6d6540974b4fcc6319d43ef67495 103.143.19.103 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Server: CloudWAF Date: Wed, 19 Oct 2022 21:34:05 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: HWWAFSESID=fedd821a08235ced740; path=/ HWWAFSESTIME=1666215242188; path=/ Cache-Control: max-age=360000 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with very long lines (4898) Size: 2310 Md5: 648d332a1a1b5037f4e0ebc4a16255e5 Sha1: 5238cd54b0126b54bd371267320e9854a1930491 Sha256: 07d02a0148b6511022ea5ba02eab78bf74dc6d6540974b4fcc6319d43ef67495
GET /static/gs_vk/logo.png HTTP/1.1 Host: sewbkbwabq.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sewbkbwabq.duckdns.org/ Cookie: __tins__21240581=%7B%22sid%22%3A%201666215254637%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201666217054637%7D; __51cke__=; __51laig__=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: sewbkbwabq.duckdns.org/static/gs_vk/logo.png FQDN: sewbkbwabq.duckdns.org IP: 45.86.77.51 HASH: bf1532dfb899554f52b0a98c2870c9a6f19e6abaf74288c6de321813fed91666 45.86.77.51 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 19 Oct 2022 21:34:05 GMT content-length: 2973 last-modified: Tue, 09 Aug 2022 08:07:50 GMT etag: "62f215d6-b9d" expires: Fri, 18 Nov 2022 21:34:05 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 275 x 29, 8-bit/color RGBA, non-interlaced\012- data Size: 2973 Md5: c6d404ecaa7646ff497deaad55392996 Sha1: 1c66c5caf35e3e633d1cb1e09a334362ad11f5fb Sha256: bf1532dfb899554f52b0a98c2870c9a6f19e6abaf74288c6de321813fed91666 Alerts: urlquery: - DynDNS domain detected
POST /gsrsaovsslca2018 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/gsrsaovsslca2018 FQDN: ocsp.globalsign.com IP: 104.18.20.226 HASH: 4f3b0616ca4d4081dcb6a0df85ef9b38da8c53ea70e503713f81bf539696bc88 104.18.20.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 19 Oct 2022 21:34:05 GMT Content-Length: 1432 Connection: keep-alive Expires: Sun, 23 Oct 2022 18:54:13 GMT ETag: "ed4bd17a0cfe5b537e78eb83f245205e25f13837" Last-Modified: Wed, 19 Oct 2022 18:54:14 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 2959 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 75cca2c45f22b509-OSL --- Additional Info --- Magic: data Size: 1432 Md5: 9a5ee93655e5b75f322e67b5c53e3e47 Sha1: ed4bd17a0cfe5b537e78eb83f245205e25f13837 Sha256: 4f3b0616ca4d4081dcb6a0df85ef9b38da8c53ea70e503713f81bf539696bc88
GET /static/js/jquery.cookie.js HTTP/1.1 Host: sewbkbwabq.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sewbkbwabq.duckdns.org/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: sewbkbwabq.duckdns.org/static/js/jquery.cookie.js FQDN: sewbkbwabq.duckdns.org IP: 45.86.77.51 HASH: 637726f51a2b6897a720f8c4089344d940bcebf5001ad3d444c7db7c46273640 45.86.77.51 HTTP/2 200 OK content-type: application/javascript server: nginx date: Wed, 19 Oct 2022 21:34:03 GMT last-modified: Thu, 17 Mar 2022 06:46:08 GMT vary: Accept-Encoding etag: W/"6232d930-c31" expires: Thu, 20 Oct 2022 09:34:03 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 31302 Md5: d8df95a763551acb01f17956d9908b9b Sha1: 3bf0f938318b00a9e21c43f699f210aabefd8b1a Sha256: 637726f51a2b6897a720f8c4089344d940bcebf5001ad3d444c7db7c46273640 Alerts: urlquery: - DynDNS domain detected
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1" Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11833 Expires: Thu, 20 Oct 2022 00:51:18 GMT Date: Wed, 19 Oct 2022 21:34:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: dcbf142b7958e83961fc03b9676d1fc6 Sha1: 930f67e486f95de63450b6d73d1957aac204fb43 Sha256: 9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1" Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11833 Expires: Thu, 20 Oct 2022 00:51:18 GMT Date: Wed, 19 Oct 2022 21:34:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: dcbf142b7958e83961fc03b9676d1fc6 Sha1: 930f67e486f95de63450b6d73d1957aac204fb43 Sha256: 9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1" Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11833 Expires: Thu, 20 Oct 2022 00:51:18 GMT Date: Wed, 19 Oct 2022 21:34:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: dcbf142b7958e83961fc03b9676d1fc6 Sha1: 930f67e486f95de63450b6d73d1957aac204fb43 Sha256: 9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1" Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11833 Expires: Thu, 20 Oct 2022 00:51:18 GMT Date: Wed, 19 Oct 2022 21:34:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: dcbf142b7958e83961fc03b9676d1fc6 Sha1: 930f67e486f95de63450b6d73d1957aac204fb43 Sha256: 9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecd863b0-94dc-48ab-a768-cb25fea284e7.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 78985912f0d45719ebcf303e3056f422390ea79b2a5ab47b19cba87f4f11b8ba 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10168 x-amzn-requestid: a52a1462-c23f-47a3-a71d-461f70f07dd4 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: aOFokG7MoAMFsgA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-634f1c9d-28faabe059a668aa610da199;Sampled=0 x-amzn-remapped-date: Tue, 18 Oct 2022 21:37:33 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: G-mCNWS-oGtoERRbr1vNbgyaom-3twofIvHj1AcOatx4AHU30Q_92Q== via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google date: Tue, 18 Oct 2022 21:42:49 GMT etag: "3e9d928edb29f9d39feda401519dd82e2e509f1e" age: 85876 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10168 Md5: ae2bf42f05c120363dd9c8bc320cbdf9 Sha1: 3e9d928edb29f9d39feda401519dd82e2e509f1e Sha256: 78985912f0d45719ebcf303e3056f422390ea79b2a5ab47b19cba87f4f11b8ba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05c7bc81-316c-4f0d-bb3e-28d892d65e29.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 743c9908b18412433934d58665bd5c5aeded03cc48be57e916a43f79e2c664b0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9070 x-amzn-requestid: 3f5c3e27-e6e2-45b1-a986-853dbfbe2813 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: aOFBfEbJoAMF-iQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-634f1ba2-6a359b2847d892f12bb2b9a4;Sampled=0 x-amzn-remapped-date: Tue, 18 Oct 2022 21:33:22 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: V8EHDb0C1ZGKbEfs8XDoBis3QUhH-Igwdcv0q0FChhX3biFeqJfnsA== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google date: Tue, 18 Oct 2022 22:07:58 GMT age: 84367 etag: "4cbe904deab4f29866b499d55c0cd646de67fdb8" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9070 Md5: ccb0f6ae2ffc84b77d6048ab25ab3c91 Sha1: 4cbe904deab4f29866b499d55c0cd646de67fdb8 Sha256: 743c9908b18412433934d58665bd5c5aeded03cc48be57e916a43f79e2c664b0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4aa09fc-f62d-4799-a1c4-465488877462.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 417e0dc9684cf6244b1ef78fb58b18d8eed290b4da174030cd6567229c085b88 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 13134 x-amzn-requestid: 69c84abf-826b-4505-b72b-068af95e12e9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Z09pjGkuIAMFa7A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63450fd6-3966cd917655b77a0c593bbd;Sampled=0 x-amzn-remapped-date: Tue, 11 Oct 2022 06:40:22 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: Yw2PvUwQCYySco1JuFpEN32eAOceHvq-d_5SuHyq0XyAqJxgVrJ6BA== via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google date: Tue, 18 Oct 2022 21:50:30 GMT age: 85415 etag: "ce392e596465ef9bacb1ad517a7053b6d9cf34a8" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13134 Md5: 39da57495ea698fe534e5d166081a28f Sha1: ce392e596465ef9bacb1ad517a7053b6d9cf34a8 Sha256: 417e0dc9684cf6244b1ef78fb58b18d8eed290b4da174030cd6567229c085b88
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a62e111-1882-4c2f-a95b-458bd478667b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b9d0ef96961762544579fecef9ac0591f9fac7bb5e8aa27dc610403aa4d7ebd5 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3842 x-amzn-requestid: d07fd909-2360-4645-8d7c-10eb1eddb31e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: aBrrkH4-oAMF4Qw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-634a2649-36776c290438bab9168d4c48;Sampled=0 x-amzn-remapped-date: Sat, 15 Oct 2022 03:17:29 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: A9kudmly6WexRLakuER6OtO_PEWkHGIpb8bnElXFHKr7nCB4HIsC_g== via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google date: Wed, 19 Oct 2022 07:34:02 GMT age: 50403 etag: "a951292e460e4c46a06d53fc36d758b97ed0b979" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3842 Md5: 7667ac94489ad167ad4d21b1b5184a23 Sha1: a951292e460e4c46a06d53fc36d758b97ed0b979 Sha256: b9d0ef96961762544579fecef9ac0591f9fac7bb5e8aa27dc610403aa4d7ebd5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9fcbf6c7-2d66-4714-a0e0-01b757ccd392.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 6602f2a020618234d34a9b6cd107398f0405de6dd14227e265aca84b38eaa5cc 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7075 x-amzn-requestid: d488b43b-0bf2-4788-a087-fa1d0ae0270a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: aCOTMF7xIAMF0tQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-634a5dad-7c7563b8761a637c1828a5ff;Sampled=0 x-amzn-remapped-date: Sat, 15 Oct 2022 07:13:49 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: Yu4JsLfxBHVL00QEgTL9SaoPGZDOJJaW7vzQvp9Zn_GOfrba9Gieiw== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google date: Wed, 19 Oct 2022 04:38:21 GMT age: 60944 etag: "41548e231e2358d3453e7630f0d07a645cc25ddc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7075 Md5: 3e86d948bf8ed2f5918f8323b043ad5f Sha1: 41548e231e2358d3453e7630f0d07a645cc25ddc Sha256: 6602f2a020618234d34a9b6cd107398f0405de6dd14227e265aca84b38eaa5cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 09aa7d94e4829f4daf33d5e2aed077afcc59628839c5d6e877172e8455879062 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 15855 x-amzn-requestid: c8171eaf-67b4-4179-9e69-36fe00ef3bfe x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZhQU8HmcIAMFw0w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-633d2db9-2985178a31d0e8c430323a26;Sampled=0 x-amzn-remapped-date: Wed, 05 Oct 2022 07:09:45 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: rpAXnpUfQgB-O_qw0uSi2pDYqD9o4kvScL2bSeY7b02Ukx5Mnw1PCQ== via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google date: Wed, 19 Oct 2022 12:28:36 GMT age: 32729 etag: "13f29acb7a694030fc2de0b42c0d95c4be49deb7" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 15855 Md5: 319cbf11bba3f159e5c9f606deded924 Sha1: 13f29acb7a694030fc2de0b42c0d95c4be49deb7 Sha256: 09aa7d94e4829f4daf33d5e2aed077afcc59628839c5d6e877172e8455879062
GET /static/gs_vk/public.css HTTP/1.1 Host: sewbkbwabq.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sewbkbwabq.duckdns.org/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: sewbkbwabq.duckdns.org/static/gs_vk/public.css FQDN: sewbkbwabq.duckdns.org IP: 45.86.77.51 HASH: aad3dfae022658b237f7f2b713072f51edf08d1526c9afbf4024a2a79f551e65 45.86.77.51 HTTP/2 200 OK content-type: text/css server: nginx date: Wed, 19 Oct 2022 21:34:03 GMT last-modified: Tue, 09 Aug 2022 08:07:50 GMT vary: Accept-Encoding etag: W/"62f215d6-818" expires: Thu, 20 Oct 2022 09:34:03 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 2119 Md5: eb3edc1f62b1af8d6ab6bdef54a8687c Sha1: 6ca1905e342dfe40c17035246ef6dc5b8fc35525 Sha256: aad3dfae022658b237f7f2b713072f51edf08d1526c9afbf4024a2a79f551e65 Alerts: urlquery: - DynDNS domain detected
GET /static/gs_vk/banner.png HTTP/1.1 Host: sewbkbwabq.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sewbkbwabq.duckdns.org/ Cookie: __tins__21240581=%7B%22sid%22%3A%201666215254637%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201666217054637%7D; __51cke__=; __51laig__=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: sewbkbwabq.duckdns.org/static/gs_vk/banner.png FQDN: sewbkbwabq.duckdns.org IP: 45.86.77.51 HASH: 2fe3b5cadeb4ad9fec7ee39d1f2170c6bb656436597087aa9a582713e53bed75 45.86.77.51 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 19 Oct 2022 21:34:05 GMT content-length: 220877 last-modified: Tue, 09 Aug 2022 08:07:50 GMT etag: "62f215d6-35ecd" expires: Fri, 18 Nov 2022 21:34:05 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 670 x 238, 8-bit/color RGB, non-interlaced\012- data Size: 220877 Md5: 2f987a1099c7a986fa860cf0e80d7b5d Sha1: 0a3e6dfbf3b0e7d361ba9fc088e2ef7805ec0310 Sha256: 2fe3b5cadeb4ad9fec7ee39d1f2170c6bb656436597087aa9a582713e53bed75 Alerts: urlquery: - DynDNS domain detected
GET /static/gs_vk/index.png HTTP/1.1 Host: sewbkbwabq.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sewbkbwabq.duckdns.org/ Cookie: __tins__21240581=%7B%22sid%22%3A%201666215254637%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201666217054637%7D; __51cke__=; __51laig__=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: sewbkbwabq.duckdns.org/static/gs_vk/index.png FQDN: sewbkbwabq.duckdns.org IP: 45.86.77.51 HASH: c0315642042bbc5f62714e1bf1ee5df4fd567a38745af3c67ff09b025a56efbb 45.86.77.51 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 19 Oct 2022 21:34:05 GMT content-length: 104029 last-modified: Tue, 09 Aug 2022 08:07:50 GMT etag: "62f215d6-1965d" expires: Fri, 18 Nov 2022 21:34:05 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 750x516, components 3\012- data Size: 104029 Md5: 3b288cf2cf8b233a1f459e89dc209d79 Sha1: 08aa186779070d33edbca5dece75e2760dfa4065 Sha256: c0315642042bbc5f62714e1bf1ee5df4fd567a38745af3c67ff09b025a56efbb Alerts: urlquery: - DynDNS domain detected
POST /gsgccr3dvtlsca2020 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/gsgccr3dvtlsca2020 FQDN: ocsp.globalsign.com IP: 104.18.20.226 HASH: 21e590eba2cb92f6e119ef904502042907d4a5fd0e4f658de62c1b81aa849445 104.18.20.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Wed, 19 Oct 2022 21:34:05 GMT Content-Length: 1414 Connection: keep-alive Expires: Sun, 23 Oct 2022 19:33:24 GMT ETag: "932a47f2dd8cd47a98bc754778ac92a7b7885b7a" Last-Modified: Wed, 19 Oct 2022 19:33:25 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 1877 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 75cca2c67b07b509-OSL --- Additional Info --- Magic: data Size: 1414 Md5: a5183a3a3cb9d948b40848718016aaa9 Sha1: 932a47f2dd8cd47a98bc754778ac92a7b7885b7a Sha256: 21e590eba2cb92f6e119ef904502042907d4a5fd0e4f658de62c1b81aa849445
GET /favicon.ico HTTP/1.1 Host: sewbkbwabq.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sewbkbwabq.duckdns.org/ Cookie: __tins__21240581=%7B%22sid%22%3A%201666215254637%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201666217054637%7D; __51cke__=; __51laig__=1 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: sewbkbwabq.duckdns.org/favicon.ico FQDN: sewbkbwabq.duckdns.org IP: 45.86.77.51 HASH: 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0 45.86.77.51 HTTP/2 404 Not Found content-type: text/html server: nginx date: Wed, 19 Oct 2022 21:34:05 GMT content-length: 146 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 146 Md5: 8eec510e57f5f732fd2cce73df7b73ef Sha1: 3c0af39ecb3753c5fee3b53d063c7286019eac3b Sha256: 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0 Alerts: urlquery: - DynDNS domain detected
GET /go1?id=21240581&rt=1666215254637&rl=12801024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1666215254637&tt=&kw=&cu=https%253A%252F%252Fsewbkbwabq.duckdns.org%252F&pu= HTTP/1.1 Host: ia.51.la User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sewbkbwabq.duckdns.org/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: ia.51.la/go1?id=21240581&rt=1666215254637&rl=1280*1024& (...) FQDN: ia.51.la IP: 103.143.19.103 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 103.143.19.103 HTTP/1.1 200 Server: CloudWAF Date: Wed, 19 Oct 2022 21:34:06 GMT Content-Length: 0 Connection: keep-alive Set-Cookie: HWWAFSESID=13e4c67f14a3a5e43e1; path=/ HWWAFSESTIME=1666215242724; path=/ --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/jquery-3.3.1.min.js HTTP/1.1 Host: sewbkbwabq.duckdns.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://sewbkbwabq.duckdns.org/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: sewbkbwabq.duckdns.org/static/js/jquery-3.3.1.min.js FQDN: sewbkbwabq.duckdns.org IP: 45.86.77.51 45.86.77.51 HTTP/2 200 OK content-type: application/javascript server: nginx date: Wed, 19 Oct 2022 21:34:03 GMT last-modified: Thu, 17 Mar 2022 06:46:08 GMT vary: Accept-Encoding etag: W/"6232d930-1538f" expires: Thu, 20 Oct 2022 09:34:03 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Alerts: urlquery: - DynDNS domain detected

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.36

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 939 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Alert, Content-Length, Content-Type, Retry-After, Backoff 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Date: Wed, 19 Oct 2022 20:51:41 GMT 

                                        
                                            
Expires: Wed, 19 Oct 2022 21:17:41 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: n55P2oiF3J1FNxOkajjFkpJoOnxwPy2bvXQ-vaDRhAjsEPhQteMM0Q== 

                                        
                                            
Age: 2542 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    bdb8b66c705a7b996496d780f50c00b5

                                                Sha1:   403ae92039fcc933870f51f913f78ccaf9652256

                                                Sha256: c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: yAIAP9KP5hQMG4XLeOK8gQuCDAiCM8zn4OOzHui5GYf/n0fFwXYqy47bZlqYgBACcJ8hmgLmC0w= 

                                        
                                            
x-amz-request-id: T4142QHA0J5CRHH4 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Wed, 19 Oct 2022 21:04:24 GMT 

                                        
                                            
age: 1779 

                                        
                                            
last-modified: Fri, 30 Sep 2022 18:50:55 GMT 

                                        
                                            
etag: "67d5a988edcda47bc3b3b3f65d32b4b6" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    67d5a988edcda47bc3b3b3f65d32b4b6

                                                Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f

                                                Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 19 Oct 2022 21:34:03 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 198 

                                        
                                            
Cache-Control: max-age=124561 

                                        
                                            
Date: Wed, 19 Oct 2022 21:34:04 GMT 

                                        
                                            
Etag: "634fb017-1d7" 

                                        
                                            
Expires: Fri, 21 Oct 2022 08:10:05 GMT 

                                        
                                            
Last-Modified: Wed, 19 Oct 2022 08:06:47 GMT 

                                        
                                            
Server: ECS (ska/F717) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    62fc1aa250922e13956facbf8071aebb

                                                Sha1:   111e2978b9e6931f7ba9ee3beac67d1af7bf8c92

                                                Sha256: 1d0de3a88ad67da5ba748190f997994299058b77fff93caa24f4c611b3dec560

                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 

                                        
                                            
Host: ocsp.globalsign.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 79 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         104.18.20.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Wed, 19 Oct 2022 21:34:04 GMT 

                                        
                                            
Content-Length: 1414 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Expires: Sun, 23 Oct 2022 18:19:00 GMT 

                                        
                                            
ETag: "f930e10b880660f8357c8fe1ea456f994e93baa3" 

                                        
                                            
Last-Modified: Wed, 19 Oct 2022 18:19:01 GMT 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Age: 1669 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 75cca2bea87eb509-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   1414

                                                Md5:    11c35b4b0b1d6ac2ce961331588c0b6f

                                                Sha1:   f930e10b880660f8357c8fe1ea456f994e93baa3

                                                Sha256: 687186b593ba430cb2e3db75a07bdd463cae2d01ca0c50e7ee9deb787db87fc9

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1" 

                                        
                                            
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=11833 

                                        
                                            
Expires: Thu, 20 Oct 2022 00:51:18 GMT 

                                        
                                            
Date: Wed, 19 Oct 2022 21:34:05 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    dcbf142b7958e83961fc03b9676d1fc6

                                                Sha1:   930f67e486f95de63450b6d73d1957aac204fb43

                                                Sha256: 9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "9194E452419C2C850073F3DC2D2B23D759DD793B9A0D881CB7B6D862D54805B1" 

                                        
                                            
Last-Modified: Wed, 19 Oct 2022 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=11833 

                                        
                                            
Expires: Thu, 20 Oct 2022 00:51:18 GMT 

                                        
                                            
Date: Wed, 19 Oct 2022 21:34:05 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    dcbf142b7958e83961fc03b9676d1fc6

                                                Sha1:   930f67e486f95de63450b6d73d1957aac204fb43

                                                Sha256: 9194e452419c2c850073f3dc2d2b23d759dd793b9a0d881cb7b6d862d54805b1

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05c7bc81-316c-4f0d-bb3e-28d892d65e29.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9070 

                                        
                                            
x-amzn-requestid: 3f5c3e27-e6e2-45b1-a986-853dbfbe2813 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: aOFBfEbJoAMF-iQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-634f1ba2-6a359b2847d892f12bb2b9a4;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 18 Oct 2022 21:33:22 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: V8EHDb0C1ZGKbEfs8XDoBis3QUhH-Igwdcv0q0FChhX3biFeqJfnsA== 

                                        
                                            
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 18 Oct 2022 22:07:58 GMT 

                                        
                                            
age: 84367 

                                        
                                            
etag: "4cbe904deab4f29866b499d55c0cd646de67fdb8" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9070

                                                Md5:    ccb0f6ae2ffc84b77d6048ab25ab3c91

                                                Sha1:   4cbe904deab4f29866b499d55c0cd646de67fdb8

                                                Sha256: 743c9908b18412433934d58665bd5c5aeded03cc48be57e916a43f79e2c664b0

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a62e111-1882-4c2f-a95b-458bd478667b.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 3842 

                                        
                                            
x-amzn-requestid: d07fd909-2360-4645-8d7c-10eb1eddb31e 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: aBrrkH4-oAMF4Qw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-634a2649-36776c290438bab9168d4c48;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 15 Oct 2022 03:17:29 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: A9kudmly6WexRLakuER6OtO_PEWkHGIpb8bnElXFHKr7nCB4HIsC_g== 

                                        
                                            
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 19 Oct 2022 07:34:02 GMT 

                                        
                                            
age: 50403 

                                        
                                            
etag: "a951292e460e4c46a06d53fc36d758b97ed0b979" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   3842

                                                Md5:    7667ac94489ad167ad4d21b1b5184a23

                                                Sha1:   a951292e460e4c46a06d53fc36d758b97ed0b979

                                                Sha256: b9d0ef96961762544579fecef9ac0591f9fac7bb5e8aa27dc610403aa4d7ebd5

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a5488a3-4a1c-4773-99f6-81e18bcdccd2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 15855 

                                        
                                            
x-amzn-requestid: c8171eaf-67b4-4179-9e69-36fe00ef3bfe 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ZhQU8HmcIAMFw0w= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-633d2db9-2985178a31d0e8c430323a26;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 05 Oct 2022 07:09:45 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: rpAXnpUfQgB-O_qw0uSi2pDYqD9o4kvScL2bSeY7b02Ukx5Mnw1PCQ== 

                                        
                                            
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 19 Oct 2022 12:28:36 GMT 

                                        
                                            
age: 32729 

                                        
                                            
etag: "13f29acb7a694030fc2de0b42c0d95c4be49deb7" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   15855

                                                Md5:    319cbf11bba3f159e5c9f606deded924

                                                Sha1:   13f29acb7a694030fc2de0b42c0d95c4be49deb7

                                                Sha256: 09aa7d94e4829f4daf33d5e2aed077afcc59628839c5d6e877172e8455879062

                                        
                                            POST /gsgccr3dvtlsca2020 HTTP/1.1 

                                        
                                            
Host: ocsp.globalsign.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 79 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         104.18.20.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Wed, 19 Oct 2022 21:34:05 GMT 

                                        
                                            
Content-Length: 1414 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Expires: Sun, 23 Oct 2022 19:33:24 GMT 

                                        
                                            
ETag: "932a47f2dd8cd47a98bc754778ac92a7b7885b7a" 

                                        
                                            
Last-Modified: Wed, 19 Oct 2022 19:33:25 GMT 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Age: 1877 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 75cca2c67b07b509-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   1414

                                                Md5:    a5183a3a3cb9d948b40848718016aaa9

                                                Sha1:   932a47f2dd8cd47a98bc754778ac92a7b7885b7a

                                                Sha256: 21e590eba2cb92f6e119ef904502042907d4a5fd0e4f658de62c1b81aa849445

                                        
                                            GET /go1?id=21240581&rt=1666215254637&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=&ing=1&ekc=&sid=1666215254637&tt=&kw=&cu=https%253A%252F%252Fsewbkbwabq.duckdns.org%252F&pu= HTTP/1.1 

                                        
                                            
Host: ia.51.la

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://sewbkbwabq.duckdns.org/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         103.143.19.103

                                        
                                            HTTP/1.1 200

                                        

                                        
                                            
Server: CloudWAF 

                                        
                                            
Date: Wed, 19 Oct 2022 21:34:06 GMT 

                                        
                                            
Content-Length: 0 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Set-Cookie: HWWAFSESID=13e4c67f14a3a5e43e1; path=/
HWWAFSESTIME=1666215242724; path=/ 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

URL	sewbkbwabq.duckdns.org/
IP	45.86.77.51 (United States)
ASN	#35913 DEDIPATH-LLC
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-10-19 21:34:14 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	0
urlquery alerts	11 DynDNS domain detected
Tags	None

Overview

Domain Summary (11)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 45.86.77.51

Last 5 reports on ASN: DEDIPATH-LLC

Last 1 reports on domain: sewbkbwabq.duckdns.org

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (1)

#1 JavaScript::Write (size: 502) - SHA256: 0f7fc43e376999cbdba89c8d649e737aa0367ecfa3bc56fbc423f724cbc46d4b

HTTP Transactions (34)

Overview

Domain Summary (11)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 45.86.77.51

Last 5 reports on ASN: DEDIPATH-LLC

Last 1 reports on domain: sewbkbwabq.duckdns.org

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (1)

#1 JavaScript::Write (size: 502) - SHA256: 0f7fc43e376999cbdba89c8d649e737aa0367ecfa3bc56fbc423f724cbc46d4b

HTTP Transactions (34)

Network Intrusion Detection Systems