Overview

URLhappytriangle.org/bat1k3.dll
IP 185.230.63.171 (United States)
ASN#58182 Wix.com Ltd.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-21 04:36:41 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (12)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-25T18:14:26Z 782 2373 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-26T05:11:12Z 413 5882 34.160.144.191
ocsp.globalsign.com (1) 2075 2012-07-20T19:46:16Z 2023-03-26T05:09:32Z 368 1920 104.18.21.226
ocsp.digicert.com (1) 86 2012-05-21T09:02:23Z 2023-03-26T05:18:47Z 341 761 192.229.221.95
www.wix.com (1) 18092 2012-12-26T18:13:41Z 2023-03-25T13:53:04Z 467 58383 35.228.150.132
happytriangle.org (1) 0 2020-08-27T20:24:08Z 2023-03-20T19:06:46Z 359 706 185.230.63.107
r3.o.lencr.org (10) 344 2020-12-02T09:52:13Z 2023-03-25T18:12:03Z 3380 8867 23.36.77.32
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-26T05:11:59Z 333 391 34.117.237.239
static.parastorage.com (8) 5943 2012-08-03T19:30:14Z 2023-03-26T05:25:00Z 3428 94686 151.101.65.91
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-26T05:10:29Z 606 127 44.236.185.217
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-26T05:09:08Z 3246 46440 34.120.237.76
www.happytriangle.org (1) 0 2021-04-24T20:46:45Z 2023-01-25T11:05:24Z 461 1102 34.117.168.233

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-03-21 medium happytriangle.org/bat1k3.dll Malware
2023-03-21 medium www.happytriangle.org/bat1k3.dll Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 185.230.63.171
Date UQ / IDS / BL URL IP
2023-06-04 21:01:14 UTC 0 - 0 - 5 molasfbm.com.br/ 185.230.63.171
2023-06-04 13:59:04 UTC 0 - 0 - 7 entitygaming.in/ 185.230.63.171
2023-05-30 23:02:44 UTC 0 - 4 - 0 restorant-illyria.com/ 185.230.63.171
2023-05-29 16:57:44 UTC 0 - 0 - 3 caseyarchitecturallighting.com/file/USAA.COM/ (...) 185.230.63.171
2023-05-29 16:57:44 UTC 0 - 0 - 2 caseyarchitecturallighting.com/file/USAA.COM/ (...) 185.230.63.171


Last 5 reports on ASN: Wix.com Ltd.
Date UQ / IDS / BL URL IP
2023-06-06 01:07:31 UTC 0 - 2 - 0 sigmapainters.com/ 185.230.63.186
2023-06-05 23:35:59 UTC 0 - 0 - 2 trackupdate-usps.com/ 185.230.61.173
2023-06-05 21:05:51 UTC 0 - 5 - 0 wix.to/DHpO8An?ref=emfooter 199.15.163.155
2023-06-05 17:38:18 UTC 0 - 2 - 0 preparationproposalfile.hopp.to/symmons 185.230.60.168
2023-06-05 06:31:14 UTC 0 - 0 - 2 defilo.io/ 185.230.63.107


Last 1 reports on domain: happytriangle.org
Date UQ / IDS / BL URL IP
2023-03-21 04:36:41 UTC 0 - 0 - 2 happytriangle.org/bat1k3.dll 185.230.63.171


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-04-01 19:48:30 UTC 0 - 0 - 3 raiffiesen.blogspot.si/ 172.217.21.161
2023-03-29 18:16:53 UTC 0 - 0 - 2 duaneandirisblue.com/statement.html 185.230.63.186
2023-03-22 09:51:25 UTC 0 - 0 - 1 belcoavia.ro/wp-content/uploads/js/BOfA/BOfA/ (...) 23.236.62.147
2023-03-21 15:57:01 UTC 0 - 0 - 3 raiffiesen.blogspot.ro/ 142.250.74.65
2023-03-21 12:26:22 UTC 0 - 0 - 2 www.rosamaster.com.br/wp-content/themes/rosa2 (...) 35.228.150.132

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 152) - SHA256: dee67aac013765d423d09df578e3f24d9a58bfaef2b7eb84dd5bd396e345fed7
< script src = "//www.wix.com/_api/wix-laboratory-server/laboratory/conductAllInScope?scope=error-pages&accept=jsonp&callback=setExperimentsSync" > < /script>


HTTP Transactions (34)


Request Response
                                        
                                            GET /bat1k3.dll HTTP/1.1 
Host: happytriangle.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             185.230.63.107
HTTP/1.1 301 Moved Permanently
                                            
Date: Tue, 21 Mar 2023 04:36:30 GMT
Content-Length: 0
Connection: keep-alive
location: https://www.happytriangle.org/bat1k3.dll
strict-transport-security: max-age=3600
Age: 37779
Server-Timing: cache;desc=hit, varnish;desc=hit, dc;desc=84
X-Seen-By: RQvnDyN5n1orR2cJk2hJbg==,sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVjc1veqNUXHRFwGw60H+O85,m0j2EEknGIVUW/liY8BLLseIu4dGXwqDk+m1otFKtK9sl0ueLMGCVziLUYuJmnC9,2d58ifebGbosy5xc+FRalk+X2qjHyAvrz97fuhAcgX1YcnI+n110XMxhipuSWvW41NOYzgkI4b9QldgTQzw9Aw==,2UNV7KOq4oGjA5+PKsX47FK1FiZH5oKQPGEyHGuLowi8ZDY613cHYLbuhNMgAom1
Cache-Control: no-cache
X-Wix-Request-Id: 1679373390.856238192623787397
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18243
Expires: Tue, 21 Mar 2023 09:40:33 GMT
Date: Tue, 21 Mar 2023 04:36:30 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "08378FE6A897AB5A9C8D3BC2748C9670659D0D0D164317FDFAC88D23FEE78FA0"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5325
Expires: Tue, 21 Mar 2023 06:05:15 GMT
Date: Tue, 21 Mar 2023 04:36:30 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 21 Mar 2023 04:27:22 GMT
age: 549
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4ad6984a756720fbfff47b37a75513a2
Sha1:   355e35258114452af8b9638985ed9d8ef3bf0aca
Sha256: 43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "905537EF3E3A4A9030391B44BD6AC6BB5D7C9EC752B1821D683DFBF483096163"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3324
Expires: Tue, 21 Mar 2023 05:31:55 GMT
Date: Tue, 21 Mar 2023 04:36:31 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: zIr7n8G4U0IQVafLqqvdCu+jXvH1ts+r9GBXw8TX5c8d2DT/tUzAPeov/fcC3g3/yvsl3AFVbLQ=
x-amz-request-id: DP0P5VK3JQP3W9FC
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 21 Mar 2023 03:53:02 GMT
age: 2609
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Tue, 21 Mar 2023 04:36:31 GMT
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C64FB7B15B3CD9BAB8DA70214498A69946678E0E70DF69DEABE7BB1CEEA5FC8E"
Last-Modified: Tue, 21 Mar 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 21 Mar 2023 10:36:31 GMT
Date: Tue, 21 Mar 2023 04:36:31 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 21 Mar 2023 04:17:22 GMT
age: 1149
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C22EB0537CD79666B82FE61DD77FE9B0B3C059A4C65D405412ACFC2C6800B444"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6195
Expires: Tue, 21 Mar 2023 06:19:46 GMT
Date: Tue, 21 Mar 2023 04:36:31 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "C64FB7B15B3CD9BAB8DA70214498A69946678E0E70DF69DEABE7BB1CEEA5FC8E"
Last-Modified: Tue, 21 Mar 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 21 Mar 2023 10:36:31 GMT
Date: Tue, 21 Mar 2023 04:36:31 GMT
Connection: keep-alive

                                        
                                            GET /services/wix-public/1.299.0/styles/error-pages/styles.css HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happytriangle.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.65.91
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
last-modified: Sun, 15 Sep 2019 05:55:24 GMT
etag: W/"bc59bd5f822da3e199a6b98fece4e818"
x-goog-meta-origin: archive-extractor
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc7eNHvhCRAbD7EPjVZvQO20fbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000
server: Pepyaka/1.19.0
x-wix-request-id: 1678761004.4977151361152130016
accept-ranges: bytes
date: Tue, 21 Mar 2023 04:36:31 GMT
age: 750955
x-served-by: cache-bma1641-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1679373392.768474,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2894
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (15552), with no line terminators
Size:   2894
Md5:    26611c0a4655915f72db4923a56431bc
Sha1:   97395c64cd88ec513c64d6b03f5f48e063d12bda
Sha256: d70e755632f37cf354aec0a9d634b2a08309d50f238d02b389e30873f0ea07f0
                                        
                                            GET /services/wix-public/1.299.0/scripts/error-pages/locale/messages_en.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happytriangle.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.65.91
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Sun, 15 Sep 2019 05:55:20 GMT
etag: W/"c5f98494447c215860d685fe28c43c3c"
x-goog-meta-origin: archive-extractor
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVcwnP9a1Ia0LRvqhhntyPznoQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000
server: Pepyaka/1.19.10
x-wix-request-id: 1678759433.0777350377687119799
accept-ranges: bytes
date: Tue, 21 Mar 2023 04:36:31 GMT
age: 739402
x-served-by: cache-bma1641-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1679373392.770015,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1781
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4871), with no line terminators
Size:   1781
Md5:    984cc672b3055600836d0f0fe987ed5a
Sha1:   30e9197fc7c666b4e01a7cbd786dfcc7c5ae4254
Sha256: 6f42f3b7e22c928aceadbeca64500c6a4b1de963e031d77bf34479022150c9ce
                                        
                                            GET /services/wix-public/1.299.0/scripts/error-pages/app.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happytriangle.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.65.91
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Sun, 15 Sep 2019 05:55:27 GMT
etag: W/"efa4fbe4313723db287c076d3e73398e"
x-goog-meta-origin: archive-extractor
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjEM4kaaS6QH/itsJwI9pla,aVxMblM8KFG3we5NLvyVc7eNHvhCRAbD7EPjVZvQO20fbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000
server: Pepyaka/1.19.10
x-wix-request-id: 1676345950.3783881388169119800
accept-ranges: bytes
date: Tue, 21 Mar 2023 04:36:31 GMT
age: 3089058
x-served-by: cache-bma1641-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1679373392.770492,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 5603
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (23665), with no line terminators
Size:   5603
Md5:    851d1ca04e10fec6666ece846590e936
Sha1:   844db7094339ae9cd24f57d9ec0e5a0ca3ab90e6
Sha256: 5a1501306c51a31beb659c991c02631fcd88c379695c121b9daa435bb2ec66ab
                                        
                                            GET /services/third-party/fonts/Helvetica/fontFace.css HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happytriangle.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.65.91
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Tue, 17 Apr 2018 11:38:08 GMT
etag: W/"338855569759ca44a0734ec4435bcbd0"
x-amz-version-id: WeoPV8OPw8UQocVJiZwVeWZ26II363jN
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc0Sqk9+MZwtm2RdjD28LmUcQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.0
x-wix-request-id: 1677557323.7954992254285130017
accept-ranges: bytes
date: Tue, 21 Mar 2023 04:36:31 GMT
age: 1858328
x-served-by: cache-bma1641-BMA
x-cache: HIT
x-cache-hits: 11
x-timer: S1679373392.770934,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 3182
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (331)
Size:   3182
Md5:    138f6948f4f82fda4d44fad50f5456be
Sha1:   002792dd712e5de8c48d71334ca6e45042d3c992
Sha256: 2f8100e5b650bcde60f264ada67f6b5712e61036260fcbe9173bb33ffc875cff
                                        
                                            GET /services/third-party/jquery/2.0.3/jquery.min.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happytriangle.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.65.91
HTTP/2 200 OK
content-type: application/x-javascript
                                            
last-modified: Wed, 26 Jul 2017 07:04:55 GMT
etag: W/"2f0cbb7f0c5a3c00476a1e7f9500fd9f-1"
x-amz-version-id: lUzvgAVIkMfC7WkprXuYi7GAU3SremQ_
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: MISS
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVc1AtKGBpHBVRBa1WzqM3DuAfbJaKSXYQ/lskq2jK6SGP,2iuX5LYwvZa9CoGaG8ZUZomYmPgSwc4aU7J40H7VRopiS/5dZqOxSsDvwHAW5wi4
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1677541939.11148938093021023350
accept-ranges: bytes
date: Tue, 21 Mar 2023 04:36:31 GMT
age: 1831453
x-served-by: cache-bma1641-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1679373392.771348,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 29312
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32023)
Size:   29312
Md5:    975b03d7fd857300e0ad13d6769de319
Sha1:   912db7e9cadd0e2486d8380b80e0d2dd86e03c56
Sha256: 424897e5fadb664e036c49aab9fc96c56e8d4a9a6a7fd6ab27f669bd2611f47a
                                        
                                            GET /services/third-party/angularjs/1.2.28/angular.min.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happytriangle.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.65.91
HTTP/2 200 OK
content-type: application/x-javascript
                                            
last-modified: Wed, 26 Jul 2017 06:27:16 GMT
etag: W/"f06188602d585283a5e17900d9d76b2f-1"
x-amz-version-id: Oe.sBBO8HV4DqwAb0sd4TbV82Y5.otAe
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrciDgmy1x1bk0T2mMblm59aj,aVxMblM8KFG3we5NLvyVcyeTzFUhjLKPB6lD0luXXHcfbJaKSXYQ/lskq2jK6SGP
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1678158110.4765950704966423349
accept-ranges: bytes
date: Tue, 21 Mar 2023 04:36:31 GMT
age: 1298652
x-served-by: cache-bma1641-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1679373392.772305,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 39996
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (598)
Size:   39996
Md5:    5f1869cc10603261f3c1c773fe2af60b
Sha1:   af5bea1ac50331c1071c806de28397228a39c8ef
Sha256: 87880d8b1a2d4dfa00b6be3d32f36f422ca14d2eaed1e0b3475a8813cd78b6d1
                                        
                                            GET /services/third-party/angularjs/1.2.28/i18n/angular-locale_en.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happytriangle.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.65.91
HTTP/2 200 OK
content-type: application/x-javascript
                                            
last-modified: Wed, 26 Jul 2017 06:27:26 GMT
etag: W/"3c405f66126816b065d7d4680a6a5105-1"
x-amz-version-id: IeAD7WAYSU8sPS1PorNuCByw2miVzwg4
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrcjR6IMkIgDN3dKWLSNjYj0d,aVxMblM8KFG3we5NLvyVc2240yoD0MlMpM73djr11roeGdLDLXwpLd0CTVHPbfOd
cache-control: public, max-age=7776000, immutable
server: Pepyaka/1.19.10
x-wix-request-id: 1679366873.81565569073215777
accept-ranges: bytes
date: Tue, 21 Mar 2023 04:36:31 GMT
age: 94740
x-served-by: cache-bma1641-BMA
x-cache: HIT
x-cache-hits: 2
x-timer: S1679373392.773853,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 866
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   866
Md5:    fa365b53f8dde8376882043301d5eee3
Sha1:   aa7c46f0fd5efce84227ffae91fc556a9e2cd736
Sha256: ddd4fca2c8c260bb21fc7041cf363f2a73a8101edd83d087111b79bcd2230544
                                        
                                            GET /services/third-party/angular-translate/1.1.1/angular-translate.min.js HTTP/1.1 
Host: static.parastorage.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happytriangle.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.65.91
HTTP/2 200 OK
content-type: application/x-javascript
                                            
last-modified: Fri, 15 Dec 2017 15:35:51 GMT
etag: W/"c1d049fb1f646c932e45bc1be1999dc2"
x-guploader-response-body-transformations: gunzipped
warning: 214 UploadServer gunzipped
access-control-allow-methods: GET, OPTIONS, POST
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: br
via: 1.1 varnish (Varnish/6.0), 1.1 varnish
x-cache-status: HIT
x-seen-by: zj0K/N8xR7eC1M9gyLLPhec8x6p2CWcEzwFyRVShrchkavE0ZtMXws1mfakihq4B,aVxMblM8KFG3we5NLvyVc0Sqk9+MZwtm2RdjD28LmUcQXT2AyjWfyxKagyd4/pDD
cache-control: public, max-age=7776000
server: Pepyaka/1.19.0
x-wix-request-id: 1678149105.8866036324204230016
accept-ranges: bytes
date: Tue, 21 Mar 2023 04:36:31 GMT
age: 1334240
x-served-by: cache-bma1641-BMA
x-cache: HIT
x-cache-hits: 3
x-timer: S1679373392.774563,VS0,VE0
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2235
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (6946), with no line terminators
Size:   2235
Md5:    a7cfef48b3425eb2276b76a677a6e97f
Sha1:   329760f904bf636bce9a7c71129d8b01da0205a2
Sha256: f473d8d24d3529a1a11f44f58ae8825baae0a9577c05b4668ed16c5c91cd090a
                                        
                                            POST /ca/gsatlasr3dvtlsca2022q3 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Tue, 21 Mar 2023 04:36:31 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "C05EB0184D7566D8EE994033504CCF8070560C78"
Expires: Tue, 21 Mar 2023 15:00:00 GMT
Last-Modified: Tue, 21 Mar 2023 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1013
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7ab37e92ec810b02-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    3edfd9367fddae55e665ee5b5f5463e3
Sha1:   f659db07312471661a7c7ab141f99c4e829f1d18
Sha256: 6b645e9ce99e1a2aac0ae8f585c4dfb4123bfff5dc87abea45ec704ead559d43
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ds1N+cfFqVdmpTbZTG0xrA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             44.236.185.217
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 50I4IMKK3BfELnNgAfsuZd0ZnPI=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.229.221.95
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1091
Cache-Control: 'max-age=158059'
Date: Tue, 21 Mar 2023 04:36:31 GMT
Etag: "64189f46-1d7"
Last-Modified: Tue, 21 Mar 2023 04:18:20 GMT
Server: ECAcc (amb/6B04)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /_api/wix-laboratory-server/laboratory/conductAllInScope?scope=error-pages&accept=jsonp&callback=setExperimentsSync HTTP/1.1 
Host: www.wix.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.happytriangle.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             35.228.150.132
HTTP/2 200 OK
content-type: application/jsonp;charset=UTF-8
                                            
date: Tue, 21 Mar 2023 04:36:32 GMT
set-cookie: XSRF-TOKEN=1679373392|o6ZiaJx2r8eS;Path=/;Domain=.wix.com;Secure;SameSite=None
cache-control: no-cache
x-seen-by: sHU62EDOGnH2FBkJkG/Wx8EeXWsWdHrhlvbxtlynkVir6posNuWSSVvEKH1ojnN2,qquldgcFrj2n046g4RNSVBKUaXHrucSLmP/C0nqrtU9YgeUJqUXtid+86vZww+nL,qYxvFa0bBL43z6b6TutC4f7lhSHADKAEoDnokuhtllqeCRL2GxTUV9ILfn9zvtnrWaMUHPEJTefcCHEwUTvANQ==,7npGRUZHWOtWoP0Si3wDpw1wmR8v3iHU/pyGyiJHHXY=,xTu8fpDe3EKPsMR1jrheEOeITx7uRBr9FwbPSx2p/M4=,mvxQ9qSAmY38asKjFCcmGxzPg1vJ4Syaf5CYYmXtYgC8p9M+MNsMWP+7dRJfTBMSq2EsKJbgWvdqV1c5mq52aw==
x-wix-request-id: 1679373392.01550346047126396
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
server: Pepyaka/1.19.10
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   57586
Md5:    61503b8c91be60546f44574a32c97548
Sha1:   a4cea305bd3bd47a6cdb2213213575b8ab14f6da
Sha256: bb004e4c63f43408355e954b3679147eef698a744412d950cd40796ccf18e687
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18366
Expires: Tue, 21 Mar 2023 09:42:39 GMT
Date: Tue, 21 Mar 2023 04:36:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18366
Expires: Tue, 21 Mar 2023 09:42:39 GMT
Date: Tue, 21 Mar 2023 04:36:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18366
Expires: Tue, 21 Mar 2023 09:42:39 GMT
Date: Tue, 21 Mar 2023 04:36:33 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "49C07DA2AB4EBD66BD166BF0E20DD084B38973CD40C79F85EB283D15A1CCAC36"
Last-Modified: Sun, 19 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18366
Expires: Tue, 21 Mar 2023 09:42:39 GMT
Date: Tue, 21 Mar 2023 04:36:33 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2ad5022-7f23-468e-8e1f-6388d8cc9db8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6511
x-amzn-requestid: 82d12180-bdcb-4ce0-8588-4239ee27f236
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWI_E_eoAMF3sA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d09f-2f5df7cd5f6cee4762703d29;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:31:11 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: sTt0-W1XE7yUFGFXg2nPnKw5tKKkrw-cH_TCIbQy8JL-k0QtCNZS8w==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:52:08 GMT
age: 24265
etag: "71672a6c3523d9999522e005091863d07ea0e94a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6511
Md5:    4e5f234aedfabd736b50fef3017380f9
Sha1:   71672a6c3523d9999522e005091863d07ea0e94a
Sha256: 3314df7a93e317d509aeffc1cde69ec450ddad116a27dc197db1abce966da344
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd02b7e2d-e49d-4cc0-b89e-9fd6221ec202.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7254
x-amzn-requestid: 478965d1-a7ad-45a5-bff2-c08d81bf6bd7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B6evIEwPoAMF-Pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64141193-0f83de050b14ff0d420bb74d;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 07:06:59 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: RZ17RxytmDO8a0hosUh9GqkpSbEHpMo1L0hRjWx5yTbRFGWzBAVN6Q==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 f958a3846d80a3925f664b320dfad9c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 15:03:19 GMT
age: 48794
etag: "6f93ab1b2c313aefdb2e0b647ff9d299cfc522c0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7254
Md5:    67a217c6c45d72018d90227abf59bc56
Sha1:   6f93ab1b2c313aefdb2e0b647ff9d299cfc522c0
Sha256: a62f8a087ec5ea1e758857cc64b53478f26a9fad180fc16191b12017fc5b59e4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb294015e-de2b-400c-abd2-bcaae9cb6e46.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 3919
x-amzn-requestid: 962e7442-863d-4eee-925e-decc36c67118
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWI-FWioAMFQ7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d09f-4b933c517f504b483a66c6d4;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:31:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: LsQy2TzFZSjD34-1HdRXoKGsU5sY02boY5XEKgbZ28pf18OX7LGtMA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 a9e73292d0b92053c3e38dcec15fd0e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:45:17 GMT
age: 24676
etag: "b8ae13d28b462cc4be537cc9118d4d2664394896"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3919
Md5:    dffe7d7d164bc4961ec9bcad59d0d529
Sha1:   b8ae13d28b462cc4be537cc9118d4d2664394896
Sha256: 6e36d72ac5869c3babfadde523f65f1c0b293418b78aec2db400969313006f5b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc7839c7-2b7e-47fa-a8d7-b001f2527406.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11397
x-amzn-requestid: 9c96a37a-b2e6-46f1-94dd-1a299da61a02
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CGWw1HwVIAMF0Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418d19e-0638254835be22cc17465cc2;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 21:35:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: g2YNKMDYmcQl3rpt8G2tHJFrBf25_aNKA4v4WKBgpCQeEWEnwgbkYg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 21:45:17 GMT
etag: "93bcb7e0d7f2e7648f2749060e0a58bca3a033b9"
age: 24676
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11397
Md5:    e7f3f5682ef230a0e5ead556ccbb9c8d
Sha1:   93bcb7e0d7f2e7648f2749060e0a58bca3a033b9
Sha256: e63beb09275f78a899e992ce814b4a079aaf38a4932a32b9f9431552702224b8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b5e25da-048a-413a-a665-a2f7722e7a8b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5906
x-amzn-requestid: aa937d0b-da54-4bf4-a47f-662bea154a65
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CEYMXEk7oAMFmMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6418071b-63ccde3f35f1d1496cc313f4;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 07:11:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: dggiiyVySzSmFWlwweCoOdgJyGfLG-gsjHRUR1xfv3IDOu_8CRIOkw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 3f3347264bcaae7af741e2a2f692c6a0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 07:21:34 GMT
age: 76499
etag: "70b8c46d3b829be40d27fbeda2dbefcdb7ad17a4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5906
Md5:    e14006bd4b8766e373bc11e21bba6c42
Sha1:   70b8c46d3b829be40d27fbeda2dbefcdb7ad17a4
Sha256: 31c962ccd63afaa71a162c7f8b0b259347bd52630427f2387dcdd46ca2bf062f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde16c1fb-8973-46d5-a440-8527888510e4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5093
x-amzn-requestid: 09c682a3-b2d0-4eb8-ae9a-96ddb8716077
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9mzZFI5IAMFYiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641551af-3651fc21214db65e70caa0cf;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 05:52:47 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: VquOENg5ShRpddRHaI04cjOauy3kmVLC3uG7VB21xK4Iu2lvG9XWfw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 3f3347264bcaae7af741e2a2f692c6a0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Mar 2023 13:26:49 GMT
age: 54584
etag: "5a5d5c6a29abd635879671dbf7607df1baa17d56"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5093
Md5:    7e281be899d3a89992cd1c8493e37f77
Sha1:   5a5d5c6a29abd635879671dbf7607df1baa17d56
Sha256: 70232e33aff51589e751c478c326a4e82473c4d53f049b8b551f9dd1ba11e4ab
                                        
                                            GET /bat1k3.dll HTTP/1.1 
Host: www.happytriangle.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             34.117.168.233
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                            
date: Tue, 21 Mar 2023 04:36:31 GMT
content-language: en-US
strict-transport-security: max-age=3600
x-wix-request-id: 1679373391.396471939541616319
age: 0
x-seen-by: GXNXSWFXisshliUcwO20NZL9Lwun+M+7c/tw2Pto8/Fkqbw2F7hTUfHTLdwnYu03,qquldgcFrj2n046g4RNSVOEcKTWnPkUHK4qOWpouMik=,2d58ifebGbosy5xc+FRaloAFk+AWT/OrfJamxaLe8Jvtsxg7sUS5UNfjVVdJhq5q3QpI/ucnHvfrUjeESIoVemvoQxJEXuWIFzSENhYo66g=,2UNV7KOq4oGjA5+PKsX47PxOrQVG5YTAX9mXa+mQNgOa46R9xNIlpQ4eUPYpBuqs,7npGRUZHWOtWoP0Si3wDpw1wmR8v3iHU/pyGyiJHHXY=,xTu8fpDe3EKPsMR1jrheEJSQBLl1HsYxr/ptv+JK4zE=,9y9YchCOVZDNGbMpBN9Neps9TxwZuES6JaCXbXmNdDQgRh7bRnGCeZ5CVpjkIIdcqAQ9tQbhWUUojk0xS/sW+w==
cache-control: no-cache
vary: Accept-Encoding
server-timing: cache;desc=miss, varnish;desc=miss, dc;desc=eun1_g
x-content-type-options: nosniff
content-encoding: br
server: Pepyaka/1.19.10
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Malware