r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4b8b051d555b46b1e9e64faebf91b4ab
bdab7f1f4146f0e7c16665692e4f1edd83c10a24
e069730519f658e767ec8edb57edd8e2b1ccb18d4f0ade0920654eac18f83456
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E069730519F658E767EC8EDB57EDD8E2B1CCB18D4F0ADE0920654EAC18F83456"
Last-Modified: Tue, 17 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16245
Expires: Wed, 18 Jan 2023 14:04:07 GMT
Date: Wed, 18 Jan 2023 09:33:22 GMT
Connection: keep-alive
serendipityprizes.com/au/tar/sur5box-1000/346/
301 Moved Permanently 454 B URL HTTP/1.1 serendipityprizes.com/au/tar/sur5box-1000/346/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ea626cc095348be107ec90f0e2b464f6
b990236b215a8c5a29ed5b56a187dfe5bfab38d1
3d2291459f2c77821a2b0e45d708938d5803e0c2c6861ba54ae9486e7e2bd3dd
Analyzer Verdict Alert fortinet Malware
GET /au/tar/sur5box-1000/346/ HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 18 Jan 2023 09:33:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
location: http://serendipityprizes.com/au/tar/sur5box-1000/346
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8%2BrrxjERgfC5lFdTDQJttgzeyeqWtZfcYAiMTDxqG5j%2Fmg0xlcLQbUhqcs%2BDVWOqSE%2By4h3v19Dkevjy4DTrVW6G9wwi4DWZo7qoVpP7X0bcxyJsiDX7BvU9XMCc2wilwXmqt3bDxxc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b65425cee8b4ee-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb0c8d0984a1f09a012961a54cda03c6
1a8ad450a0241554ee4fc7d02fac7b83529e60f6
eee3ca879a67cc25ea89cb83de9521eea1b82845705c3e82169d4787ecb7dd3a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEE3CA879A67CC25EA89CB83DE9521EEA1B82845705C3E82169D4787ECB7DD3A"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2455
Expires: Wed, 18 Jan 2023 10:14:17 GMT
Date: Wed, 18 Jan 2023 09:33:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 18 Jan 2023 08:34:22 GMT
content-type: application/json
age: 3540
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c8239f3894cfba54d1f3a9ea1c85db5
a70f2b3bf79f2aa26b0cc0340dd182565c3eb946
64dc0508d3fcea1ec92fb60310e9b3f5454c0b69f61e8453fd443bc46ab9471b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64DC0508D3FCEA1EC92FB60310E9B3F5454C0B69F61E8453FD443BC46AB9471B"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16078
Expires: Wed, 18 Jan 2023 14:01:20 GMT
Date: Wed, 18 Jan 2023 09:33:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: RDqieWyRP1FwWjxhOAzNtSOzl6CBaeFX0HBix1CfLze8w34egAea5m1hrBEv4Au76PACY9mvEWk=
x-amz-request-id: R6YE0XTVPV907F02
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 18 Jan 2023 08:56:37 GMT
age: 2205
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 18 Jan 2023 09:33:22 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
serendipityprizes.com/au/tar/sur5box-1000/346
200 OK 5.8 kB URL HTTP/1.1 serendipityprizes.com/au/tar/sur5box-1000/346
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, Unicode text, UTF-8 text, with very long lines (17719)
Hash 209156aba203eb04f479763d56f0a390
5ba4b4db0c844ded72019512042f346151e32a9a
4ee3876a0ba21b451a6df03239e6253e561bd3903e251abe8b35414e8ab8e8f3
Analyzer Verdict Alert fortinet Malware
NIDS Severity Alert suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
GET /au/tar/sur5box-1000/346 HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Accept-Encoding
cache-control: max-age=3600, must-revalidate, public
x-content-digest: en1590b469f9fa230b502e1b06921ee568
age: 0
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hk9H8pEkJ0GWa9wKe67%2FdqQZEDf9jg3226xAnqUuXRyoZwVWKEdDXHOBf5IoOZqStxCgtPkUzr%2BM80TNZXBXkHcKCCkkP9cLs71iW5FEk%2FlGsCDl0obnq8H4%2FjPw24tS1h8MKRoZoz4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b65427b982b4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
code.jquery.com/jquery-3.6.0.min.js
200 OK 31 kB URL HTTP/2 code.jquery.com/jquery-3.6.0.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://serendipityprizes.com
Connection: keep-alive
Referer: http://serendipityprizes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:33:22 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-sp-metadata: HS256.CPKVn54GEocBCiQ0MDY0NGZhNy0zMTI4LTQ3MTMtOWQ3ZC1jN2FlNDEzNDAyNDUQ+OiCoKvU+wIaBgji+Z6eBiIMOTEuOTAuNDIuMTU0KPT2AzADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkZDZkNjdiY2YtOWFjZi00ZWE4LWE1MzUtOTRkMjQ0YzAxYTA5GJvxASIYCAISFGNkczIxMC5zazEuaHdjZG4ubmV0.lyxwgmCokwLEh2agfsAZHnnG+RmuDRnypS8FWMu17cc=
x-hw: 1674034402.dop212.sk1.t,1674034402.cds249.sk1.hn,1674034402.cds210.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2b02c407fd912449a1b278f0bf3d8574
817bcff5b7c0444426b19027c772bddce84cf130
67ceddcf2eef43f1c11fc85c1398c39b5ff875a93dafbf9c4526e6d3bc5eb52a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:33:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2b02c407fd912449a1b278f0bf3d8574
817bcff5b7c0444426b19027c772bddce84cf130
67ceddcf2eef43f1c11fc85c1398c39b5ff875a93dafbf9c4526e6d3bc5eb52a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:33:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/2atmceg766.css?v=202301171218
200 OK 2.2 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/2atmceg766.css?v=202301171218
IP
File type ASCII text, with very long lines (7771), with no line terminators
Hash aeba7328298bee3084ce642dddf9549c
0df357e998d284052df679da4e99e4b0eb4efeff
e07d8db34309e5f02a1544607b0c59d3885ba7228c23143ae9297729dab5deca
Analyzer Verdict Alert fortinet Malware
GET /assets/esle0r/autar346-igsm1000/plus/2atmceg766.css?v=202301171218 HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
vary: Accept-Encoding
etag: W/"63c690ee-1e5b"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HcytQocrmb1a0KUY7220kMwDlAdCJFvMYTs1tMtt64LRbzPEg9BVGvT7Y%2FMFtT7jSY%2BVSutyD0%2BCAFnQoT5SzkUQiu0BinNwRpZKSlTPh8OTzgoFUGpZzVTL1jZEelR%2BofrYTbini%2FQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b654299caeb4ee-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/ya364s92p2.js
200 OK 769 B URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/ya364s92p2.js
IP
File type ASCII text, with very long lines (1910), with no line terminators
Hash b9bd39c6e97dd663603b9b39feb5d897
9a0d9b9a5c198a4c039bf8b49a7ba921f7dc4eae
ebb7a19d15e9bab7a9127b825a954ef9ba91575d3656856798634f77da939f05
Analyzer Verdict Alert fortinet Malware
GET /assets/esle0r/autar346-igsm1000/plus/ya364s92p2.js HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
vary: Accept-Encoding
etag: W/"63c690ee-776"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a8%2FAhmRKgHCMg9J%2BFgU6iqc0NO8D7leyZeymKnZuhkpYPptz0O7yE8NDbwX6u2m%2FP3X5hjWMQFj2dBlBpDYGCTqA%2F9omUTpTqdjYRz10AkF9%2FOL%2BgmIHk6dkQgVyvtDgZxqKeaTUErM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b65429bc91b4f1-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/hgefc0a0b7.js
200 OK 3.3 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/hgefc0a0b7.js
IP
File type ASCII text, with very long lines (11734), with no line terminators
Hash 3e7f88d7572b74e3eebd4cb835fb2a03
8234908c5cb4b97f027c7ee4a203059a94592a88
6c705ec4983f226d89ae98f6b500353ae3cd6e3e9114e473342d237188290c64
Analyzer Verdict Alert fortinet Malware
GET /assets/esle0r/autar346-igsm1000/plus/hgefc0a0b7.js HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
vary: Accept-Encoding
etag: W/"63c690ee-2dd6"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OQyHfKgDR0R5dcv2ieNB6TVcrOEGZmycYlpD62gfefEETDa8EvAbZoCoarCUKQtuwYvd9FfUne5eg%2F%2FXfyWmg44%2FANcbV93ijXarQ%2FVNaKkaNDz5q%2FOXJkEJX9UrPb5qzC1p1SN8rhA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b65429b9d8b4fa-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/j2cted96vn.js
200 OK 1.1 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/j2cted96vn.js
IP
File type ASCII text, with very long lines (3732), with no line terminators
Hash d701561ae2d8fb578ab826a70f3c52ad
4dced597714b28d0b4795b9f36dca52033610845
67714dada49b7bb83114ccbb609cfeb0ce9bdfc89239ab7bd568b97c70723100
Analyzer Verdict Alert fortinet Malware
GET /assets/esle0r/autar346-igsm1000/plus/j2cted96vn.js HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
vary: Accept-Encoding
etag: W/"63c690ee-e94"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YajFZRS9ZXEfK%2B5eyzM4VsVJFwhvobv4zkftPm6IPX6hWArNmQ1VDcAe2pizUe1bswNVi7SftdHXUB7shGWfDhH2rrbBIySnT3HCEfWxmt5kPDbTf3x8fxX%2B2EBg96vzjYcEqPJ1I%2BE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b65429cad0b4eb-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/1jly50og7i.js
200 OK 1.9 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/1jly50og7i.js
IP
File type ASCII text, with very long lines (6386), with no line terminators
Hash 4c81c44993aada3c99309e37d7070937
0942ded196070992f5a595147dfb7802cf9f9478
6bbf4e7b9afb08270f2f37da3ae43d48f76ab53456944a3911c8f1236745c986
Analyzer Verdict Alert fortinet Malware
GET /assets/esle0r/autar346-igsm1000/plus/1jly50og7i.js HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
vary: Accept-Encoding
etag: W/"63c690ee-18f2"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QZ42Ykoei58VXchn7mc0C9xKJX9EUXSnwVY1WH%2FJngQzTh99%2Fc%2Fvv1faZEEt8D%2FQEHkL0jaYEoLT%2Btf6zwxA%2F7oi7Pf5WAwTzJZg8tlbhVs3tB%2BaAwEanlcgEL5gNT7HgtsBF9Q4KnI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b65429bee90b4d-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/109itf2x6k.css
200 OK 253 B URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/109itf2x6k.css
IP
Hash 0b274dc95ba8af7894d478e52441bcab
81a9ba47e77d9f85db264833e7a57bf64a5a0065
00d591b2753dfd0b22e5656b5337a22484ee7b0f0c39e2d28f2f2361d32f01bf
GET /assets/esle0r/autar346-igsm1000/plus/109itf2x6k.css HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
vary: Accept-Encoding
etag: W/"63c690ee-18b"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g2%2B0FDPX3nalQakfwUWmOsCoE9rdz9oZXvSZlWcfPZrrcsxANe13T%2BXrGcgYN3VvRh%2FsI7V4oovBL5hrWFFX4rG90y5BPp%2F%2FCFtikEsYwQrX8WOIiRufwPvzN0K2%2FGXGhhHMoMdbC3I%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b65429ce13b500-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 18 Jan 2023 09:17:25 GMT
age: 958
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:33:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://serendipityprizes.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jan 2023 13:09:06 GMT
expires: Wed, 17 Jan 2024 13:09:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 73457
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d547e6cc07ecb62b49cfb14f223d3b87
7f316e0778cf7e132cf376b92d1f9860e06894f5
4ceb4872fc5aa21ce6cdba296ce83f68d1b46836df05886eb76e0607358ba42c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:33:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/967jxa90g5.css
200 OK 550 B URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/967jxa90g5.css
IP
Hash fd1f71f34d32a363255822342c0b6cb3
7d8955bdad438f49ba8b6a6e5832dbee2c51956c
c4cfa8ca2542b2b941a6207b3cf5f92a97cc16c60d2f021e9fe27be3c80e61d7
GET /assets/esle0r/autar346-igsm1000/plus/967jxa90g5.css HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
vary: Accept-Encoding
etag: W/"63c690ee-575"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o25%2FKMk%2BMSZAkclX5GpU42y8pQO%2FSMAp0%2BMR88%2Fwbw4pF1oy5kxKJg%2Fjp5db0%2FZZO1rB%2FP5AlYo9kzriB2OKbD3wLsymT70anzuk7vReV3v8SwAZGegiSxFXroCSnIziQJOQOrchGgE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b6542b3f86b4ee-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash 8720730dce33d0026a1a354ac93d4a7d
ed5f086bc646a4d93d2344b19ff7821c96e44f7c
b2892fda88242fbc4d58dd1f3bb159ca02cbf98b77c57dde66fba98d183c0136
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1712
Cache-Control: max-age=86518
Content-Type: application/ocsp-response
Date: Wed, 18 Jan 2023 09:33:23 GMT
Etag: "63c66529-1d7"
Expires: Thu, 19 Jan 2023 09:35:21 GMT
Last-Modified: Tue, 17 Jan 2023 09:06:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/9e8epr69g3.js
200 OK 1.0 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/9e8epr69g3.js
IP
File type ASCII text, with very long lines (3093), with no line terminators
Hash 23188da9b8ad5adfad671ba5de98df4c
1ab9c7b7705fdb85f193af51e391d62c5fcf0f0c
7930c1d1ce78a6683e90ba15c2a91e5e801adbff9bd1651c967c0e1deca55d12
Analyzer Verdict Alert fortinet Malware
GET /assets/esle0r/autar346-igsm1000/plus/9e8epr69g3.js HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
vary: Accept-Encoding
etag: W/"63c690ee-c15"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pd1C1GhN1rChy5JJ7qLb7NFygmxm5hqvv5YYxPUOXqgksZkMU2sKvPsJ7swi5QjpJWgl0d4GBjt6Jg4O1qXt5NkeEGdB%2FQkmKFoP%2BP0%2F8rBt3%2F2AEKe7ayTEHHkanrikaBtNuhjy1TM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b6542b5ebcb4f1-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/62l8tgodha.css?v=202301171218
200 OK 916 B URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/62l8tgodha.css?v=202301171218
IP
Hash b49419d218b9c3669bd3d7711d5e8030
3dd6b56eaf3b0b7efc8d50763a0c01c67189af59
cc65ad38d3383e376cc3e55d01965b09b512bc21ab15ea1416379eaec9ba1d74
Analyzer Verdict Alert fortinet Malware
GET /assets/esle0r/autar346-igsm1000/plus/62l8tgodha.css?v=202301171218 HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
vary: Accept-Encoding
etag: W/"63c690ee-ead"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Kbrvw4xcJym%2FLlZ8RTGXjlkk5N8FOdZtS8JJ7wnqM72Jcg%2FBU5it0B4eSVZlLayqm3Jr%2FrFzvZYI2XzlyVknsfHVSfoJurOSu6XIeo4sLQpJ0PuOQexIw%2FC2Y3w35mRP%2B1BfhPkTxA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b6542b6caab4fa-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/9c2ecwist8.css
200 OK 362 B URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/plus/9c2ecwist8.css
IP
File type ASCII text, with very long lines (1038), with no line terminators
Hash b8e1b01e940cdc99d0b3723164040104
0e51858edd8d2d5fba03cbbdf16c1f2f500fb934
358475fa2ced3110cadefcc52aea53a68691bb65190ee9fc6e46e1703dd28b67
GET /assets/esle0r/autar346-igsm1000/plus/9c2ecwist8.css HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
vary: Accept-Encoding
etag: W/"63c690ee-40e"
content-encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6nJvEu8fqs1iqlciZ8vAS4p7bXIeVoAA9dfVNVvfr5MS7DfAHXSzDrN03lfD4oPOYdepM5bEm384aNEbA934ogWM0OHSJOPfi%2FSjp2k2J6a%2BmqR%2FNUvHpx4BYigugU3C0BAkSrc3%2FBo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78b6542b6cbbb4eb-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://serendipityprizes.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 19:33:54 GMT
expires: Thu, 11 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 568769
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
beevakum.net/pfe/current/micro.tag.min.js?z=5646225&sw=/sw-check-permissions-36757.js
200 OK 14 kB URL HTTP/1.1 beevakum.net/pfe/current/micro.tag.min.js?z=5646225&sw=/sw-check-permissions-36757.js
IP
File type C source, ASCII text, with very long lines (39559), with no line terminators
Hash 710afc5f904ea87801da7e4974cf1979
8e8351827329a8671b337441784391195dc27c4f
24e7227f0bed8ca17bcc0a344c550167c34016d0160111bfff4136b570f82ca8
GET /pfe/current/micro.tag.min.js?z=5646225&sw=/sw-check-permissions-36757.js HTTP/1.1
Host: beevakum.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: application/javascript
Last-Modified: Wed, 21 Dec 2022 12:58:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63a302ea-9a87"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
serendipityprizes.com/assets/esle0r/autar346-igsm1000/tp6028i5dv.jpg
200 OK 2.2 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/tp6028i5dv.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 98x98, components 3\012- data
Hash 0d82ee46d4561fc63077b17a6b4e40c4
f8d88a99c32dd37066163ad049fc20123d0d200f
be2f3a64ed58f2768f9a33740dc964609646939a425a404c7d10d5ca09de30c3
GET /assets/esle0r/autar346-igsm1000/tp6028i5dv.jpg HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/jpeg
Content-Length: 2187
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-88b"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bhUQyXVxFtsu25j1RngfMBkhWU2cKPNjWiyxmpnZwuCWaDvHmN3EUPD650K559eXIxmCkStc0xSoEDjNtrUaHcKxf4HCXhjBsQc2lasIFVlYPgz6wVYNq2CSYFw5hPR4KsHn1MpCgss%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542d0ebdb4eb-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/cd7ulz0nbc.jpg
200 OK 1.6 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/cd7ulz0nbc.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 98x98, components 3\012- data
Hash c76f5a635d4b6494ff2cc1022cb4ff67
039e569b5dd07e7f24dbe26e02804b0c9b411923
c6945707f49e74da139b58686bda048b1f9473d3b7f2d094045a606055fd3282
GET /assets/esle0r/autar346-igsm1000/cd7ulz0nbc.jpg HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/jpeg
Content-Length: 1642
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-66a"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mznC4p4UYSVv8Y3FZLpXJz4xwPLpKbuJ1D3euoNM%2Fp%2FYwZO2EcFRR%2B8lyt%2FGXhMSNjDWOSUm6kJWxB7fQJRt%2BjidkS52p8uC5vHZOA1KUYXy6gmX0Z1eY4j2uOblOiUoz%2BPY4rUMj3A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542d09e3b4ee-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/g69cqr8mlc.png
200 OK 1.2 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/g69cqr8mlc.png
IP
File type PNG image data, 65 x 65, 8-bit colormap, non-interlaced\012- data
Hash 97eed4e9848f1918dcec70ae8820c968
24fa1f31d7b399b5483fcabbeb9c1d7d4f0403a7
d7a6d6f78b31ec2350e9fea43784a0e914a29505f14bc3e8660f7a565fb3e83e
GET /assets/esle0r/autar346-igsm1000/g69cqr8mlc.png HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/png
Content-Length: 1192
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-4a8"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vq0aa24gOqwNPCRQ5ZWtdC6UioH3CAI35Mp%2F38JVHyW5CmlAxwbJxt%2FPRrnIo5SiefoLCm7nlJBCsURL5HugEy0uvn0ljDLKZ%2FsZyZsl90ejlXMwekHCE7Difls%2FqxFm00cJsWdy8CM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542d091ab4f1-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/cdehjzi68y.png
200 OK 466 B URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/cdehjzi68y.png
IP
File type PNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d9c764991a1ebba259ce1afc777c756
fedbba216589a0a40fabb2e0cb24911e663e679e
7adac1888791ad42f547c97c9c9dad37faee15dfb5e76f20eabc8a0a0b6168e9
GET /assets/esle0r/autar346-igsm1000/cdehjzi68y.png HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/png
Content-Length: 466
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-1d2"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1mBAAeI4JwxDI7Pl0GFsO29T7WyKK8xxY3iJ%2BIUluF0p4F6WsMMKrAC69ChHtlEE7kTQR8HVflyLYzdTZ%2BZM%2BbqkoulzpPBKlnKpdyn73PO4QskFLMFMjiKH%2FE2FDXvVx30Q1UWByFo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542d0a6bb500-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pG66GEdwL+3SsCpdMr8SJQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: a+T2LI6Bc1rik56E/uUwEnGa6zM=
serendipityprizes.com/assets/esle0r/autar346-igsm1000/wz2q3f3urf.png
200 OK 63 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/wz2q3f3urf.png
IP
File type PNG image data, 480 x 350, 8-bit/color RGBA, interlaced\012- data
Hash 362d561a476e0de32a1b75ab1ec7e3fc
1326779e11c7074d5b9643bdfaa1a10d54bd85ba
ebf810e660eef11c72dcecfa2ed03ef92d4c165a3c330a4023dfbc20ef462797
GET /assets/esle0r/autar346-igsm1000/wz2q3f3urf.png HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/png
Content-Length: 63272
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-f728"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1XcJhaOczJvB1eIKBOMNRSb2S5nn%2F6Mf5fpHugcQxdYkFb8TbX2r7yAR54L%2FQ%2BL%2F9U6d6fAguKGGD9dr0ZraUoZj5e5FSvZLlHCxM%2FlzgPMtij%2FdzFD62TvgFV74awLOi41ZtgpnZcw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542d0f64b4fa-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/6r96fzq99n.png
200 OK 63 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/6r96fzq99n.png
IP
File type PNG image data, 480 x 350, 8-bit/color RGBA, interlaced\012- data
Hash 362d561a476e0de32a1b75ab1ec7e3fc
1326779e11c7074d5b9643bdfaa1a10d54bd85ba
ebf810e660eef11c72dcecfa2ed03ef92d4c165a3c330a4023dfbc20ef462797
GET /assets/esle0r/autar346-igsm1000/6r96fzq99n.png HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/png
Content-Length: 63272
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-f728"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ANqfQfoCamWpYKYBzIVlHoANbjJf2oAFiwVqIh3Gr5V1it6qb88S%2BpzxcN%2FsZS6Wx0G1XObIeP3b7NHnvNxeYXOGLpjiikRNK%2F7B%2FM85Fe%2BH1j2zSu5l25lYtYLKttMfdbc4ev2Jdyk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542d0a590b4d-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/hzad38wc80.jpg
200 OK 1.5 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/hzad38wc80.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 7801ac9fc7ecb17ca9078b6aa2104c43
38872c7e85dc0f2bf31d746d860a0ef0e1ef491b
f91dd4d548f0a341052f52f4b0ad76f5a32d3b829b39adec34a32d5ee594e865
GET /assets/esle0r/autar346-igsm1000/hzad38wc80.jpg HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/jpeg
Content-Length: 1493
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-5d5"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3xL1e4ldlha%2FxbQJmMbclGLWLWwfwQgug6ka7ADZmx7RtZCLEAzG8PzgUHy0lQzfwZPETt9Y%2FXlYvY3bBY0G%2FPUZhLeFvrcMMS3BV%2BYRjZ6qR59TABRbAmptyDNtmNWRMBIPkLizzq8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542e9956b4eb-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/0hu8kqvy82.jpg
200 OK 1.2 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/0hu8kqvy82.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 35e10bdf2aad262c882f5cbee5eec790
33538ef901929efc277d05be92eb11ec41e28485
59d9e6d697bfc8a9e3731682cc1e72738711e72818a0f2727b6acf836f12aedb
GET /assets/esle0r/autar346-igsm1000/0hu8kqvy82.jpg HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/jpeg
Content-Length: 1184
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-4a0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2dQV9VrNw8GFgdMgGoSugo6MpvqVAv5lD19%2B%2FJSJPkJ2OnEi9cA5jO9RGbS%2FCUpENw%2B%2Fs491Ev7Rqiyfhtd8poC%2Fw14r%2BfEGnjvpjcigtG0DPNCxDC97rt9X%2FSHJSdyKBi0YQb08F8A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542eac39b4ee-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/90o05s8g2c.jpg
200 OK 1.9 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/90o05s8g2c.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 98x98, components 3\012- data
Hash 9f7f0178de5f2c7b283da590af4f6d96
4d5718f9a65ed0cb470b163a15f02faf868e5132
e66e55e5708711642ea6715f2f7e718680e4121266df3820b147256d29272dbf
GET /assets/esle0r/autar346-igsm1000/90o05s8g2c.jpg HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/jpeg
Content-Length: 1859
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-743"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gjc8uvQ98I%2BBsUY%2FLMt1ZCVkidyW5vb23fXuZPJ7x2bNzj0UEDB35ctrOPHFEsLtJqPDfh1P%2Bxe7Onlxk6rj23lSEE52TL8jb9cpL4gnuhXhToiMQ%2FtXXol9oihXeOEgty4BtvylhW4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542eaadcb4f1-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/voqfsc492c.jpg
200 OK 3.0 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/voqfsc492c.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3\012- data
Hash b9d12a8f6d6fc81b319003decb521b08
6b2a20d0148827c1a164e60a2c677adb323481a9
0c24c6e3611b6c20a11a04c42a6db631c082b2d03c6e50a300e543b6500fe27f
GET /assets/esle0r/autar346-igsm1000/voqfsc492c.jpg HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/jpeg
Content-Length: 2973
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-b9d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7mfX0Nkm%2B5R2h%2B9PSM8KOJH7Wfjzc02VVOauxq8q9WauwtM5%2FJ6O0HhTg5hBI0bOcs21NX1YJd6Or%2FrRQze4BKhAtZdwjGXR%2BKi%2Fkvmo3X%2B5mEbqE9XFOXGuX4MfIu%2BsuswJfZMqNAk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542eac88b500-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/6f62b8olg3.jpg
200 OK 1.9 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/6f62b8olg3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3\012- data
Hash a2b83fe52776b2a68eef4de18de2ec59
8ba66d9c42d7bc469c4931de10f8de95261d3bcf
07a3ba946008b9994095a4fd137fa8326ed71db8f77ca74e4401f41b9157f1dc
GET /assets/esle0r/autar346-igsm1000/6f62b8olg3.jpg HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/jpeg
Content-Length: 1938
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-792"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CYbyRUjLmHn%2BdIMt%2Fh%2F%2FKc8zYsyDyyp%2BPW9QodsWx1hzFBxri9syuTJIlhhQiONeDKuFT0aBAO38mpBgiuQxCkrhSzreOZMlamhL2HXNnLdT0qng25db4eZ%2BLds0WGZqIbmfn353daE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b6542f6a68b4fa-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/q209afeg3a.jpg
200 OK 1.6 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/q209afeg3a.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash b0693b595e5359976be4c8df0b7fc5b6
7d981da7ccfc6baf2ac34b787a783c114176afb0
fdda40588b9b43900049996a58c1b93221ede6725d1bfa2927f85bf356068e6e
GET /assets/esle0r/autar346-igsm1000/q209afeg3a.jpg HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:23 GMT
Content-Type: image/jpeg
Content-Length: 1571
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-623"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zh8g%2Fs%2FEFFS5AA6%2B3wMlzGxETYlaB%2BGVtVFPwi2tJ7VpTIprlcaFrN2QnMSDr4oUKrPFiMCxSLHTQxfpIRn2fD1dfx8P570icMMG37f1cnRIzVBpsnKk%2Bwp7M7wpAEDZodjq%2FIUE5u8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b654301dfd0b4d-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/bfcb89d0ba.jpg
200 OK 8.7 kB URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/bfcb89d0ba.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 189x139, components 3\012- data
Hash 8f776447f0062bb5fadc8db53ad6073d
75504dc8edfe09958df816c64d4267166f756e99
4c0e1aa88553c0f63c8be870ad66dbb9b236e0569dbfb7f56480599d6629d60b
GET /assets/esle0r/autar346-igsm1000/bfcb89d0ba.jpg HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:24 GMT
Content-Type: image/jpeg
Content-Length: 8722
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-2212"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AhfrylVb3sRMBfQnltxE8qjYGjqqBRyZAfMpZ3FMm3EYPeB%2B0OGTfmDZ59WHCA24se4Q7KT55VDszvNSXlOhB8vpxea36gWhlFlaBhSnzYQoXzLZ0ql7ox5PEZ6wZO6s0PAHWiuPJww%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b654302b7eb4eb-OSL
alt-svc: h2=":443"; ma=60
serendipityprizes.com/assets/esle0r/autar346-igsm1000/vgawh5d9c3.png
200 OK 468 B URL HTTP/1.1 serendipityprizes.com/assets/esle0r/autar346-igsm1000/vgawh5d9c3.png
IP
File type PNG image data, 21 x 21, 8-bit colormap, non-interlaced\012- data
Hash fb794c44e112b8f84cd149efa0e31313
b472f6b1650c932fb6431d0049eed30cd582ec88
382cfd24776703d5eb156a2441dfb0066342b6b778d54cb45a8894ded8e4f975
GET /assets/esle0r/autar346-igsm1000/vgawh5d9c3.png HTTP/1.1
Host: serendipityprizes.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serendipityprizes.com/au/tar/sur5box-1000/346
HTTP/1.1 200 OK
Date: Wed, 18 Jan 2023 09:33:24 GMT
Content-Type: image/png
Content-Length: 468
Connection: keep-alive
last-modified: Tue, 17 Jan 2023 12:13:34 GMT
etag: "63c690ee-1d4"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Fv7IbvTXKg3A3WXmwQ8SVsUUEVKabS6IpLf6fDL5F92xngyqpVq8YLPLHORXJUKbL89Pnfy3rebR6FOdMkIoj9ghzoH4klAPfsAl42HXdHGHLa2nBittoHRMdd4KAEm7vOXzIuzPlI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78b654319d4db4fa-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5632
Expires: Wed, 18 Jan 2023 11:07:16 GMT
Date: Wed, 18 Jan 2023 09:33:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5632
Expires: Wed, 18 Jan 2023 11:07:16 GMT
Date: Wed, 18 Jan 2023 09:33:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5632
Expires: Wed, 18 Jan 2023 11:07:16 GMT
Date: Wed, 18 Jan 2023 09:33:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6cfc390c95e65230e6798520be7df960
084d7efc24649c68fb6a0da6929585873796ec2a
ca8ad2a520681efa3bd19dc19b9414ae238d6ec5cf8d443103cabd16099c2117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CA8AD2A520681EFA3BD19DC19B9414AE238D6EC5CF8D443103CABD16099C2117"
Last-Modified: Tue, 17 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5632
Expires: Wed, 18 Jan 2023 11:07:16 GMT
Date: Wed, 18 Jan 2023 09:33:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F053123e4-9914-4404-b1e9-cb5f3e38b7a2.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F053123e4-9914-4404-b1e9-cb5f3e38b7a2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5caa7df39f82600c651046957ab6b62d
d6d6fbd676b74e487ee06248c48da87e178223e7
df3090d2e7c7c6e970fe498609d74c63e04aa80d55a26c956d1e3be5bebfafbc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F053123e4-9914-4404-b1e9-cb5f3e38b7a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11781
x-amzn-requestid: 522a0799-2025-43cd-9d7e-08cdaa5acf11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0vQMGZRIAMFfjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4f8cd-697804fd5b8b3cff7d2d5a7e;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 07:12:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MGfNpq5RCQifmDzeCJl4-1DPyd63DRE89n_BlQwQanwYyYquvaBkBw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 07:21:45 GMT
age: 7899
etag: "d6d6fbd676b74e487ee06248c48da87e178223e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ce66831-56e0-4f6e-ba05-da99c3485e5e.jpeg
200 OK 3.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ce66831-56e0-4f6e-ba05-da99c3485e5e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 928e970121a035e9f8d537e4bfe6bf5c
ce4aadc6b3500508d1c4b42b76f09be4414b6eee
2da1438b17cf05aed64e565350dcc706420f2bae7e8c5e36d1b5bad38248c275
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ce66831-56e0-4f6e-ba05-da99c3485e5e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3599
x-amzn-requestid: 5b743b27-b6d4-4d98-9984-3a5e17cb28e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A1xH8BIAMFuZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714f1-2f1031db0871abae4760d5b6;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jyWosZVSdPHomvHRyf-MuxVp0gR7sKIJ0-jmMStDeixhd8Bhoqzitg==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:01:09 GMT
age: 41535
etag: "ce4aadc6b3500508d1c4b42b76f09be4414b6eee"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8656702f08344d3a4658bc43a9074a1f
fba424e1d09cbdc839ca320458b51715dafbbccc
0b0ac963c377b07f843637348f3d7c41d2aca89540ab8c2b80ef5fbbf466fee8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe52164e3-afec-433e-87ab-adb17222f1cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13848
x-amzn-requestid: 93bbdd19-aa04-49ec-858f-9fa1d6b736d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6BKCGEtoAMFgsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c71573-008911af44c3998d7b27b837;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:38:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: adtKl3gOcesaXNHcRbi71-1Wz6caEgtXrAvbhB9qhId7eJEkd7d7pQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 21:59:45 GMT
age: 41619
etag: "fba424e1d09cbdc839ca320458b51715dafbbccc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefcc19e1-75f3-4a6f-8686-3308f93dd409.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefcc19e1-75f3-4a6f-8686-3308f93dd409.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df397b10a8e03cec7f74cd8f0fbb4e6e
625e8a1b7e865def8861e194ac754c486cd374e7
6bafab2eaac6814dd4c0f2155119f71e01cf6ecd602d51fa5d5e547db3588705
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefcc19e1-75f3-4a6f-8686-3308f93dd409.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7574
x-amzn-requestid: e330d010-6465-47c6-b45f-b25a6de84f9d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e6A16GjsIAMFYgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c714f2-17ca5566719117874cb6a6d0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 21:36:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wF_siKELQDBuWLkhNtrGzLwKyuMaGaSoCQNpE5etDRs6XotQgRYF3w==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 22:02:53 GMT
age: 41431
etag: "625e8a1b7e865def8861e194ac754c486cd374e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86f138af-59eb-444d-882b-80f5918f4405.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86f138af-59eb-444d-882b-80f5918f4405.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 402bdd90bc2557de4f317d4d0ec892ed
b205b0bb74fabcf1612f22db53c197b63ae4ce0c
2fa402a38832c3efe15d5fee9116b36aeea5a0012ba4e8d6477b4fa9a0368598
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86f138af-59eb-444d-882b-80f5918f4405.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11028
x-amzn-requestid: 2b2b0030-a54b-42d1-a680-69e23c4320bd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e4AteE7uIAMFSvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c647ef-5abf38ea140446ec294cdf6c;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 07:02:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ApT3FVNNohshR3ZepIle34K_XJYUoJz7Ucm1JYfrlVuaQgAYrl-ESA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 07:16:18 GMT
age: 8226
etag: "b205b0bb74fabcf1612f22db53c197b63ae4ce0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F861225b5-aa80-4ecb-b68c-3a62a2e3d376.gif
200 OK 25 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F861225b5-aa80-4ecb-b68c-3a62a2e3d376.gif
IP
File type GIF image data, version 89a, 296 x 148\012- data
Hash e9e29acd071f93411556a2a1cbb076fa
6cc5c64b7e82cc5bdc148be6f4760e98cb06f414
a1d23e683f912c5c9a334df441908c7d522ae8f41c91dbb0e99e6bf5162bc54e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F861225b5-aa80-4ecb-b68c-3a62a2e3d376.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 24970
x-amzn-requestid: 65ccc511-17aa-468c-a607-f531ccba1e91
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0K86HLgIAMFfxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4beb8-798eaf875ae85c5e1d73e183;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 03:04:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RCzR1Y9Aya6p6jIR9T0rDo5BEyR_q238uzLQpJ7veDu2HDPCaMtKbg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 03:56:47 GMT
age: 20197
etag: "6cc5c64b7e82cc5bdc148be6f4760e98cb06f414"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
IP
GET /bootstrap/4.5.0/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://serendipityprizes.com
Connection: keep-alive
Referer: http://serendipityprizes.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:33:22 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3afe15e976734d9daac26310110c4594"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 11/25/2022 23:03:19
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: a40c513eb92cadc8c19abeae617b6e2f
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78b65429be380b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.bundle.min.js
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.0/js/bootstrap.bundle.min.js
IP
GET /bootstrap/4.5.0/js/bootstrap.bundle.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://serendipityprizes.com
Connection: keep-alive
Referer: http://serendipityprizes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:33:22 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"7fd2f04e75bd7ab1a79d80cdd4c33085"
last-modified: Mon, 25 Jan 2021 22:04:10 GMT
cdn-cachedat: 11/15/2022 10:39:27
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1054
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: bfc14641d65a70bba1c2e2d8c905d227
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78b65429ce420b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext
IP
GET /css?family=Roboto:400,700&display=swap&subset=cyrillic,cyrillic-ext,greek,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://serendipityprizes.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 18 Jan 2023 09:33:22 GMT
date: Wed, 18 Jan 2023 09:33:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
kit.fontawesome.com/7deea0368b.js
200 OK 0 B URL HTTP/2 kit.fontawesome.com/7deea0368b.js
IP
GET /7deea0368b.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://serendipityprizes.com
Connection: keep-alive
Referer: http://serendipityprizes.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:33:23 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: Fztda5BDfgbhnDirCFcB
cf-cache-status: MISS
server: cloudflare
cf-ray: 78b65429ed1db503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b
IP
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://serendipityprizes.com/
Origin: http://serendipityprizes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:33:23 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 87911f7f4ec2932c1f9ed5a36cc017ae.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P1
x-amz-cf-id: 2KDFFUNsfP0AkKlaQovGY8BMZSI5FwegbksGPPjMc_Ra2xZ_UBUzpw==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AZmV1n4OALN5mdoCTyJ1VzCc4pvhDygYSDxTZtrofTuQW%2BrudBIPv7l1gz5tFevUxfWNpY6GlVLy92%2F7yIUDyrSaGO0Mnq5iwOHRkFNvMr%2ForbhEKsLXepiI0s9Q5aMYfVYQJZ1q3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78b6542dc835d168-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b
IP
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://serendipityprizes.com/
Origin: http://serendipityprizes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:33:23 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bdbd00aed84ab2a1b2623adb63c9331e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P1
x-amz-cf-id: BXJ6eUPFFF6HUxv_tROd2FPH3CUkoZM-qK6ByAH2mgifesuZ7OC2zA==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BfNLh%2FYrTjOfsvHg3P%2BHH72iSSdt3Wc%2FI0TMHA7Simpw5ZgBtBqQ%2FaM2Fonzj%2B0oQl1tu01MAR9StV0S2aFfamU95qbWUO%2Fl%2BmGYsFkgYCrnBjw5NpN3gvnCrKzBJMLVW5tKNmoabQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78b6542dc832d168-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7deea0368b
200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=7deea0368b
IP
GET /releases/v5.15.4/css/free.min.css?token=7deea0368b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://serendipityprizes.com/
Origin: http://serendipityprizes.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 18 Jan 2023 09:33:23 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bf8b5b2c3ca89509ca41446ce65cfb98.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P1
x-amz-cf-id: NYaYPHWhkiwzJLG7EOcFF_aT3DekVqHbadd7cAcHo2XwLvyOL7dolg==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LCpj2jvpvoRkVBGUKk81NF%2FfQPANPZbpeIkfyAWbMWhamD0ftsgPuQ8TOLdHtEirX2zKtbXmx4eBFw7AI%2BRhmjX2FoWyyyOUGOwoeVCTvKN%2BTxJ%2B3RlsajUh%2BKj01Fx3804R%2FlXAKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78b6542dd84ad168-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.201.154
104.18.10.207
23.36.76.226
93.184.220.29