Overview

URLmydhl-package.roxanaysebastiantango.com/public/AfjIEYvGt2HSM8Dox0QcleZsNhbuliTY
IP 45.79.27.198 (United States)
ASN#63949 Linode, LLC
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-06 12:25:12 UTC
StatusLoading report..
IDS alerts0
Blocklist alert3
urlquery alerts No alerts detected
Tags None

Domain Summary (21)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-05 17:13:20 UTC 34.117.237.239
mydhl-package.roxanaysebastiantango.com (2) 0 2023-02-01 21:23:13 UTC 2023-02-05 16:52:09 UTC 45.79.27.198 Unknown ranking
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-05 17:38:54 UTC 35.82.179.239
files.killbot.org (1) 0 2020-10-15 14:12:52 UTC 2023-02-05 05:33:10 UTC 172.67.166.105 Unknown ranking
static.hotjar.com (1) 641 2014-11-01 05:14:27 UTC 2023-02-05 17:12:35 UTC 143.204.55.37
ka-f.fontawesome.com (6) 3598 2019-12-17 06:36:13 UTC 2023-02-05 21:24:29 UTC 172.64.168.22
vc.hotjar.io (1) 2334 2019-04-16 10:33:25 UTC 2023-02-05 17:19:24 UTC 54.230.111.91
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-05 17:15:56 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-05 17:31:26 UTC 34.160.144.191
cdn.lr-in.com (1) 13237 2021-07-19 14:36:56 UTC 2023-02-06 05:19:31 UTC 104.21.234.144
in.hotjar.com (1) 1746 2018-07-03 09:33:18 UTC 2023-02-05 17:19:16 UTC 54.77.39.192
r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2023-02-05 17:17:28 UTC 23.36.77.32
ocsp.digicert.com (5) 86 2012-05-21 07:02:23 UTC 2023-02-05 21:08:33 UTC 93.184.220.29
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2023-02-05 17:44:26 UTC 34.120.237.76
script.hotjar.com (1) 887 2020-11-05 10:14:15 UTC 2023-02-05 22:45:13 UTC 143.204.55.68
ws-mt1.pusher.com (1) 8253 2016-01-27 14:04:54 UTC 2023-02-06 06:32:55 UTC 34.203.47.246
cdnjs.cloudflare.com (2) 235 2012-05-23 12:49:49 UTC 2023-02-05 17:18:44 UTC 104.17.25.14
kit.fontawesome.com (1) 1868 2019-03-29 02:12:52 UTC 2023-02-05 17:25:28 UTC 104.18.23.52
ocsp.usertrust.com (1) 899 2012-05-21 15:43:18 UTC 2023-02-05 17:14:26 UTC 172.64.155.188
ocsp.sca1b.amazontrust.com (1) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 143.204.42.158
r.lr-in.com (1) 16828 2021-07-27 13:26:50 UTC 2023-02-05 05:32:08 UTC 104.198.23.205

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2023-02-05 2 mydhl-package.roxanaysebastiantango.com/public/AfjIEYvGt2HSM8Dox0QcleZsNhbuliTY DHL Airways, Inc.

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-02-06 2 mydhl-package.roxanaysebastiantango.com/public/AfjIEYvGt2HSM8Dox0QcleZsNhbuliTY Phishing
2023-02-06 2 mydhl-package.roxanaysebastiantango.com/public/ Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 45.79.27.198
Date UQ / IDS / BL URL IP
2023-03-29 09:14:22 +0000 0 - 0 - 2 mydhl-package.roxanaysebastiantango.com/publi (...) 45.79.27.198
2023-02-07 16:45:30 +0000 0 - 0 - 2 mydhl-package.roxanaysebastiantango.com/publi (...) 45.79.27.198
2023-02-07 13:09:37 +0000 0 - 0 - 2 mydhl-package.roxanaysebastiantango.com/publi (...) 45.79.27.198
2023-02-07 13:08:57 +0000 0 - 0 - 2 mydhl-package.roxanaysebastiantango.com/publi (...) 45.79.27.198
2023-02-07 13:08:09 +0000 0 - 0 - 2 mydhl-package.roxanaysebastiantango.com/publi (...) 45.79.27.198


Last 5 reports on ASN: Linode, LLC
Date UQ / IDS / BL URL IP
2023-03-31 07:47:28 +0000 0 - 0 - 1 mail.thecareerkendra.com/thecareerkendra.com.zip 172.105.56.108
2023-03-31 06:29:52 +0000 0 - 0 - 1 cefow.com/http:/cefow.com/mtm/async/ 45.33.20.235
2023-03-30 18:36:44 +0000 0 - 2 - 0 link.remoteco.com/click/1phwXfg31C9p37.JRFoLx (...) 185.3.93.228
2023-03-30 16:09:42 +0000 0 - 0 - 0 tr.craig-ventures.com 50.116.48.121
2023-03-30 14:24:49 +0000 0 - 0 - 26 myonlinehbsc.com/ 170.187.148.56


Last 5 reports on domain: roxanaysebastiantango.com
Date UQ / IDS / BL URL IP
2023-03-29 09:14:22 +0000 0 - 0 - 2 mydhl-package.roxanaysebastiantango.com/publi (...) 45.79.27.198
2023-02-07 16:45:30 +0000 0 - 0 - 2 mydhl-package.roxanaysebastiantango.com/publi (...) 45.79.27.198
2023-02-07 13:09:37 +0000 0 - 0 - 2 mydhl-package.roxanaysebastiantango.com/publi (...) 45.79.27.198
2023-02-07 13:08:57 +0000 0 - 0 - 2 mydhl-package.roxanaysebastiantango.com/publi (...) 45.79.27.198
2023-02-07 13:08:09 +0000 0 - 0 - 2 mydhl-package.roxanaysebastiantango.com/publi (...) 45.79.27.198


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-02-25 05:40:33 +0000 0 - 0 - 2 dutsh-helppackage.ecranul.ro/public/KLySTasKO (...) 85.9.63.169
2023-02-25 05:40:15 +0000 0 - 0 - 2 dutsh-helppackage.ecranul.ro/public/jbqqGCKK9 (...) 85.9.63.169
2023-02-25 05:39:50 +0000 0 - 0 - 2 dutsh-helppackage.ecranul.ro/public/DiQq4rnQc (...) 85.9.63.169
2023-02-25 05:39:29 +0000 0 - 0 - 3 dutsh-helppackage.ecranul.ro/public/j9hFuFw3A (...) 85.9.63.169
2023-02-25 05:39:12 +0000 0 - 0 - 3 dutsh-helppackage.ecranul.ro/public/BF00sB68c (...) 85.9.63.169

JavaScript

Executed Scripts (11)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (44)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11644
Expires: Mon, 06 Feb 2023 15:39:05 GMT
Date: Mon, 06 Feb 2023 12:25:01 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20072
Expires: Mon, 06 Feb 2023 17:59:34 GMT
Date: Mon, 06 Feb 2023 12:25:02 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2192
Expires: Mon, 06 Feb 2023 13:01:34 GMT
Date: Mon, 06 Feb 2023 12:25:02 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Feb 2023 11:36:27 GMT
age: 2915
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    ff250d3ef3fa45322bf05039a0122a9f
Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d
Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 7llKDhigpTh6IUTiWG28uIW/TvR16JJi4CXCr6K8/+fk61cPDhZOE2j9r92DlwXmCPdDkbkOmJM=
x-amz-request-id: MKYM1EY6GB6JX5HG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Feb 2023 11:53:41 GMT
age: 1881
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 06 Feb 2023 12:25:02 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /public/AfjIEYvGt2HSM8Dox0QcleZsNhbuliTY HTTP/1.1 
Host: mydhl-package.roxanaysebastiantango.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         45.79.27.198
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
x-powered-by: PHP/8.1.14
cache-control: no-cache, no-store, must-revalidate, max-age=0
location: https://mydhl-package.roxanaysebastiantango.com/public
set-cookie: XSRF-TOKEN=eyJpdiI6IkJjL3hwSGlYYUVld1VSWE4wVkxraHc9PSIsInZhbHVlIjoiSy9lTkNYTEdzOHkrRnVTNlh2YnA3RUNrNFFXU0VJNXhuY3g0ck8yTzBTYTJCZE9RbW5sZ3VoRTVKbW5sQlYxY1pBWVRpYWZHaHNIOThiSExaS0k5M0hvc1IwMFF0Q1R6V0FGN1dieVcvMUtMV0lHczk0WTBtZytOdG5RWEwwdjIiLCJtYWMiOiJjZTM2NTIzMzY4YTMyMTZjOTFmZWU1NTdhODQzMjI0ZDlmYjkwZTE4MWIwYzc5N2E5NjY1NzZmY2MwOGY5MTIzIiwidGFnIjoiIn0%3D; expires=Mon, 06-Feb-2023 14:25:02 GMT; Max-Age=7200; path=/; samesite=lax; secure laravel_session=eyJpdiI6InRzTEdSb2RnSlEzNWxBVitZbWlFSGc9PSIsInZhbHVlIjoiRDYyalp2dXlUZFBZa2xvcjJRN3l1dURDYktFeFdjeC8xTUxoWVZ2UUc0MlRXTGN5Z0taZkVLYU5wemdvQi9POUtLdGkybUNWM2l2TFFJdkl1YUMxNEtXZVJHUlFCaEVaVmRTVFJ1Y1JxQ0ZBd1hFZ21aVWVubDByTk1kd3FwRXkiLCJtYWMiOiIyMjg3OWZjZWExMTQ0NzVmYmJjMGYyZWZkMDc4MDYxNjE1MzkxZDUxNjQ5YmEwN2U1YzRjYTY0ODk5MmIzNzlmIiwidGFnIjoiIn0%3D; expires=Mon, 06-Feb-2023 14:25:02 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure
vary: Accept-Encoding
content-encoding: gzip
date: Mon, 06 Feb 2023 12:25:02 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   928
Md5:    e87186e15ab5cf4c82ada5d5a3bd8cde
Sha1:   0884e7dbf1050f1e47b93ba215376cf3c6f995a4
Sha256: c6ad7b9c27b4ceaa1241d5ff517d97e483ba7365169bce2517d3c2dba9c3f600

Alerts:
  Blocklists:
    - openphish: DHL Airways, Inc.
    - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, Pragma, Alert, Cache-Control, Content-Length, Expires, Retry-After, Backoff, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Feb 2023 12:07:20 GMT
age: 1062
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10784
Expires: Mon, 06 Feb 2023 15:24:46 GMT
Date: Mon, 06 Feb 2023 12:25:02 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oBXhbG4nKWQjPipEii0b3g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.82.179.239
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: QB74OqH+JqVQr1k0iwlQA7hKz/Q=

                                        
                                            GET /.cdn-cgi/killbot-security.js HTTP/1.1 
Host: files.killbot.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.67.166.105
HTTP/2 404 Not Found
content-type: text/html
                                        
date: Mon, 06 Feb 2023 12:25:03 GMT
content-security-policy: default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval'
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGdCM1PwrPgJEyeiT1K0SfS1DnummngAS4YVPHz25wLuohMHInIOikQ4DTeiIfkg08oAyj5DnS8zeU9iPSWePhhC7s4xwNzPk0HQ6O6LomIVwjvFHqZipC7PWR1IyZou3X72iQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7953ddc03e3a0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   804
Md5:    129068eef4205ddb590919cb0a9e9267
Sha1:   2269796616af496c270a72f440e0092955117139
Sha256: 7f040820df19dba9964a6fcb104fc91a5dfe47d0ff915c79c482141adf908a27
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1710
Cache-Control: max-age=87023
Date: Mon, 06 Feb 2023 12:25:04 GMT
Etag: "63df9be1-1d7"
Expires: Tue, 07 Feb 2023 12:35:27 GMT
Last-Modified: Sun, 05 Feb 2023 12:06:57 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5720
Cache-Control: 'max-age=158059'
Date: Mon, 06 Feb 2023 12:25:04 GMT
Last-Modified: Mon, 06 Feb 2023 10:49:44 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Mon, 06 Feb 2023 12:25:04 GMT
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 219396
expires: Sat, 27 Jan 2024 12:25:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G3uXrUnhYR2PIYng%2Fb4ODV5eMb9PI%2FnfLjTurxJw70lzHzPPkUHF%2BY%2FueDbS7xt%2FGL%2F0vzzeTcMpaA32SJJPin3%2F9HqAHEJLJC1FpC9eJaPFOALvwn6MN7LSfROLCGf7315EX6ac"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7953ddc8a8bf0afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   5631
Md5:    109d1ed85cd01f9cdab73a4cac5bf80d
Sha1:   d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
Sha256: 8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4283
Cache-Control: 'max-age=158059'
Date: Mon, 06 Feb 2023 12:25:04 GMT
Last-Modified: Mon, 06 Feb 2023 11:13:41 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2052
Cache-Control: max-age=93839
Date: Mon, 06 Feb 2023 12:25:04 GMT
Etag: "63dfb52b-117"
Expires: Tue, 07 Feb 2023 14:29:03 GMT
Last-Modified: Sun, 05 Feb 2023 13:54:51 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11574
Expires: Mon, 06 Feb 2023 15:37:58 GMT
Date: Mon, 06 Feb 2023 12:25:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11574
Expires: Mon, 06 Feb 2023 15:37:58 GMT
Date: Mon, 06 Feb 2023 12:25:04 GMT
Connection: keep-alive

                                        
                                            GET /f7165dd215.js HTTP/1.1 
Host: kit.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.18.23.52
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Mon, 06 Feb 2023 12:25:04 GMT
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: Fz_xjgResMq5raAUyyfi
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 7953ddc89ca20b51-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   4508
Md5:    38ed3a4f20b5c839b4bbb4ab913dc622
Sha1:   1102ed3730373f6e7b370a69312f10abe13e981d
Sha256: f05b5101dc0b08a1f32e3d480b3241c5bb5899c305c637dd20bc94039ee734bc
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f49c6ce-40f8-40bf-9423-2de34118bace.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8981
x-amzn-requestid: 0054e925-c381-4737-bd92-32b2af3a604e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiQHRFoAMFw6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-45ea5ee33d07326c593d21d3;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ixAMZh_xOYWVESJ0jOEPOXZ4GQBDUZZsh26yEDYfl8APcBF2x2sZYg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 52501
etag: "809a42ce7c76cea0ce16af8172d852723c3a5f02"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8981
Md5:    714723c38877e0d1655c7118a88ec064
Sha1:   809a42ce7c76cea0ce16af8172d852723c3a5f02
Sha256: 6bad7253694d155de31a8f5a3c635545a39aac340ca49d1bc10efb6739d4a356
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10514
x-amzn-requestid: ac2a383b-833d-4dae-9bd9-43dc3d9e373d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPEIyoAMFqUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-436bb6816b269ce45b9f8600;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RYNzle5-l5dOMPWb2Bmu_T5aIJw9NX2FKuJsej8hzpYZcgD6coH9SA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:09 GMT
age: 52495
etag: "1ff698b9cf660165e846dfc4770f29852aedce45"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10514
Md5:    9046d887fd45a0940e31a74173d17798
Sha1:   1ff698b9cf660165e846dfc4770f29852aedce45
Sha256: 0c7b0e1250aa7718b7b35b80a1442f62e94ace1fb578fb781ec8204ee96386d0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9808
x-amzn-requestid: 75cc8041-19f5-4994-96b6-b14d3c90ec6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiSFZAIAMF65g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-355d272c345c8c37595b4bb2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T7YlRZ936VEDkBvo2YKrS3GbyEh1xzC8W-50KiODzFjTnQb-hvkKpw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 52501
etag: "395f04af71767acc9516387c8b07bde08968fdfe"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9808
Md5:    ccc8078cc937b7de0b299bcee1496f1b
Sha1:   395f04af71767acc9516387c8b07bde08968fdfe
Sha256: cf959fc4a72d80dcab20c235bec6d21eadaab87efa7a8969744cd228628ba050
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7851
x-amzn-requestid: 11d3fe95-844b-4e5d-b31c-f99e96e2b608
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHeEIAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-602b91422dff88a750b8e3e9;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7LXNdWi5iKCUI61c2z3spsg5_DGu1jnZ4cIACc3MCmqWP57RveBMGw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:03 GMT
age: 52501
etag: "afb91ab43953e8915a2169618d2ab5e330cde0a1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7851
Md5:    13572f84ad268caedcc897f2ad7b9baf
Sha1:   afb91ab43953e8915a2169618d2ab5e330cde0a1
Sha256: 0fb8b09608dc293b2084953b948cc7d8a7aa7bcb525090a7e44d5cb2a725fab3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31cf5553-4c3f-4c6d-8dfb-d292e38275bb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9809
x-amzn-requestid: 533de5fa-8173-430e-a657-4386728723eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpc-VEGbIAMFSmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0ec1-4e160c5c2a46d2913cc8e71e;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:03:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BgSfqU3WmIhR8N86AEfaU7pXN7jIKs_lKJVD6yCSaJBl5AVx13e5hw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:54:03 GMT
etag: "89c734d690981e30f9d566a7763a1870724d65aa"
age: 52261
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9809
Md5:    5f54c8725e5dab88b12d42876fa61b12
Sha1:   89c734d690981e30f9d566a7763a1870724d65aa
Sha256: b8cc5148ae01e1a1fe32f56bdce71de086da320cdd8a55a746609c9773fdaf77
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9579
x-amzn-requestid: c474008d-a6a9-409b-88e2-c55062044575
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzQtnFGhoAMF5Zw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ddfb23-54dd67257ba25ad24e977a9c;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 06:28:51 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0Of3BK3VqVMGQGDIODQthVmi7BC8Ney4zgGCpVuzYc1j6D8RRP-AxA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 12:01:53 GMT
age: 1391
etag: "59e0b21cdf4cfdac3f1ea05badd007727939ac42"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9579
Md5:    b3e7140400336984afc6093c1246f863
Sha1:   59e0b21cdf4cfdac3f1ea05badd007727939ac42
Sha256: 4d927e74922159db5d07b9947fa1021cff74bb7b55759960cb3941d05c1e8f11
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2052
Cache-Control: max-age=93839
Date: Mon, 06 Feb 2023 12:25:04 GMT
Etag: "63dfb52b-117"
Expires: Tue, 07 Feb 2023 14:29:03 GMT
Last-Modified: Sun, 05 Feb 2023 13:54:51 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/octet-stream; charset=utf-8
                                        
date: Mon, 06 Feb 2023 12:25:04 GMT
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 994234
expires: Sat, 27 Jan 2024 12:25:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KrK2Oor4jnwBizz6DE5aHNxUnxc4ISdZIkEuDJdCGcVzq3P0gs%2FKXvcp3PQFJU5n646RgENN4LcujsYpxrOyhOePp8K1R%2FXoaVgTNcFdx8CCjnOX3pzhyVq3VxsDj%2Fpm%2B62yRCtg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7953ddcafe9e1c0a-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                        
                                            GET /logger-1.min.js HTTP/1.1 
Host: cdn.lr-in.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.234.144
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Mon, 06 Feb 2023 12:25:04 GMT
access-control-allow-origin: *
cache-control: public, max-age=14400
cross-origin-resource-policy: cross-origin
etag: W/"ca4604512cf718b9fcdae3355a2e92e7391bcdb61a2acf57f4888dc45aeceb0f"
last-modified: Fri, 03 Feb 2023 22:30:11 GMT
strict-transport-security: max-age=31556926
x-served-by: cache-ams21061-AMS
x-cache: HIT
x-cache-hits: 1
x-timer: S1675463625.402455,VS0,VE1
vary: x-fh-requested-host, accept-encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 231
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0wAsn94EGDcWzRnEFsypl3KMr8cxx9adr0mMJr5cWkP0%2B2XVjwjPh9QxYuEaQEb21ajQvi2shGfOniGnnX47wziQqhfALUjEvOhvRztpvdbqhZ9bpI97tgvRGZwgIyNH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7953ddc90842072a-LHR
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   171032
Md5:    32912ab0c57b85faf22f2f7f3bcafa57
Sha1:   b26234d7c54e889191444d7bd93a19a3cd624fed
Sha256: e799cabf0a134321326ddfe8a333f7f409d1058e2731933178b5c3134c08664c
                                        
                                            GET /c/hotjar-2895475.js?sv=6 HTTP/1.1 
Host: static.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.37
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
date: Mon, 06 Feb 2023 12:24:29 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/1d2989e74696eabd11691aa345ec2899
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: R9G_YOfV_xI7Sv2HrptGszPTQNZdpYlqSztQWgQw2Zl96npud99oFw==
age: 36
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7460)
Size:   4641
Md5:    89395e05c48afe8b285ffadf316e2921
Sha1:   3067f001dd43a5c65471f096281cd58ecb86d620
Sha256: 5dff4500ee7ffcaf1d828aff5d5f6a7ac5b1ca554ed03043ff6f9e0bcb3833ab
                                        
                                            GET /modules.bca0d1c28285412bb689.js HTTP/1.1 
Host: script.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.68
HTTP/2 200 OK
content-type: application/javascript
                                        
content-length: 67924
date: Fri, 03 Feb 2023 13:10:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "e923aa360dc485b9df86355bd040c998"
last-modified: Fri, 03 Feb 2023 13:09:45 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lINMQ2aMauidKRiUXn160Jtf3QuFES-Rkygxj0Yrxs1gxs5NjJ60AQ==
age: 256499
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (49086)
Size:   67924
Md5:    e923aa360dc485b9df86355bd040c998
Sha1:   03c46dbd41e9d4bdf8a9e4bfbaba3f7f2e9280ec
Sha256: 9c7575553c5b81f9b905dbb27c8116b175b69e7472aa6597f8cace1c6434d676
                                        
                                            GET /releases/v6.2.1/webfonts/free-fa-brands-400.woff2 HTTP/1.1 
Host: ka-f.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.168.22
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Mon, 06 Feb 2023 12:25:05 GMT
content-length: 107656
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:15:23 GMT
etag: "d3c93d772e2ec6d8c7c7e726f92a7dbf"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 2ef58ed55caca3380e66558d27160ee8.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR52-C1
x-amz-cf-id: EGWwVqDat1jlcLEaeYzzEV3rXKJV33-DvyDkaRpqwge0NPPwHLeCLg==
age: 146919
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BDXBVX3rnQwM25MXLnP9wLxS9GmCWaU0gdA0OVOD3OB0sxyjY7b%2BmxYW96Fd0t9XXTDNNSTtUPnOo%2FrUmgHsL8h0vKysdf43X9V%2F5bP%2BYUhJVPlJ61FASEwZPcWyhJe3Z1rs7mNvvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7953ddd10c607717-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 107656, version 770.768\012- data
Size:   107656
Md5:    d3c93d772e2ec6d8c7c7e726f92a7dbf
Sha1:   4bed608cc63253a50fe7e1abbb28396066902d0e
Sha256: 4f04c94b287d7dfdfad36e60915eefbef7127a073546e6c21512b5052c6ac48d
                                        
                                            GET /releases/v6.2.1/webfonts/free-fa-solid-900.woff2 HTTP/1.1 
Host: ka-f.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.168.22
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Mon, 06 Feb 2023 12:25:05 GMT
content-length: 150500
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:15:23 GMT
etag: "69a76555beae5c43a59559396c1aeb54"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 1e14debf40c7c0d32192ed8ad517da20.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR52-C1
x-amz-cf-id: asu4IDNGRwDb3lKhZGdI90B3-oKdp0YfCC3CgTczhRrAG4BpyTYNMw==
age: 146919
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zocGhW3fLwTnU7MA4KaxcymSFWSlr6QYhHe8JLTWiKHsDGO2Fq3q5W2Zh0JaQA6C9qf8jkqJHD%2FNbfEfUVga%2FDp%2Fc8jAzEwV8zW1R2WQGgFti6o%2FgIv19RnHP97DuSKAcIaVAGuVcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7953ddd10c617717-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 150500, version 770.768\012- data
Size:   150500
Md5:    69a76555beae5c43a59559396c1aeb54
Sha1:   7d2759002c67a66fc38a72dd0e395e2da3d41474
Sha256: 1494e2691e1c13a3f35cbc3e1b56c5187c10ffe220d1fdc58d99494a666244d4
                                        
                                            GET /sessions/2895475?s=0.25&r=0.16072951041549177 HTTP/1.1 
Host: vc.hotjar.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.91
HTTP/2 204 No Content
                                        
access-control-allow-origin: *
cache-control: no-store
date: Mon, 06 Feb 2023 12:25:05 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DFCcM_woMfQgm8VHCTRDdApeq5NqdfAfusSKKWuezNwNuzutY3AE7Q==
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 06 Feb 2023 12:25:05 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 04 Feb 2023 13:28:48 GMT
Expires: Sat, 11 Feb 2023 13:28:47 GMT
Etag: "bb468f358c09cf3b1c174509a4c492b14c5d7ce5"
Cache-Control: max-age=602309,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 769
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7953ddd20c2eb518-OSL

                                        
                                            GET /app/bc5ba70500b3342fb1aa?protocol=7&client=js&version=7.0.3&flash=false HTTP/1.1 
Host: ws-mt1.pusher.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://mydhl-package.roxanaysebastiantango.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mao/1tYkPnzJXWI8n0+ULw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.203.47.246
HTTP/1.1 101 Switching Protocols
                                        
Date: Mon, 06 Feb 2023 12:25:05 GMT
Connection: upgrade
Server: nginx/1.17.7
Upgrade: websocket
Sec-WebSocket-Accept: oJuEa3wfmnrx3DcCYzjZuKV4q8o=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.158
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 06 Feb 2023 12:25:05 GMT
Last-Modified: Mon, 06 Feb 2023 12:04:58 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8SWM0ja2_yeTOlmR1g8QkuwsUJU4omWZRGXwoMWdcZRW67l-vLp_cA==
Age: 1207

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "020BFA81A277296FDFC3CCC3E1DDF682EBC61F99F720820F5C8E6FA36734CDAB"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20071
Expires: Mon, 06 Feb 2023 17:59:39 GMT
Date: Mon, 06 Feb 2023 12:25:08 GMT
Connection: keep-alive

                                        
                                            POST /i?a=mnnzup%2Fdus&r=5-52023b42-53c0-4a92-94f8-56a8c40d70ce&t=d1c1eb97-e94c-4ddf-86ea-1356176c6ea0&s=0&rs=0%2Cu&u=7006a718-f08b-471e-ba13-f1c350b88fcf&is=1 HTTP/1.1 
Host: r.lr-in.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 394349
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.198.23.205
HTTP/2 201 Created
content-type: application/json; charset=utf-8
                                        
date: Mon, 06 Feb 2023 12:25:08 GMT
content-length: 104
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
etag: W/"68-bKW1I+6ujOEijWzRIER2LWMXtxA"
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-credentials: true
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,X-Csrftoken,If-Modified-Since,Cache-Control,Content-Type,Authorization,Accept,Origin,X-Logrocket-Url,X-Logrocket-Ignore,X-Logrocket-Secret,X-LogRocket-ClickHouse-Override,X-LogRocket-ClickHouse-Enabled-Queries
access-control-max-age: 1728000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   104
Md5:    189e5aa5a897b0373bbde8ab5b70865d
Sha1:   6ca5b523eeae8ce1228d6cd12044762d6317b710
Sha256: 56c57ddb04140a37df2f0b9ae80dbdd58368da58e2705746420039eeb6a60b90
                                        
                                            GET /public/ HTTP/1.1 
Host: mydhl-package.roxanaysebastiantango.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IkJjL3hwSGlYYUVld1VSWE4wVkxraHc9PSIsInZhbHVlIjoiSy9lTkNYTEdzOHkrRnVTNlh2YnA3RUNrNFFXU0VJNXhuY3g0ck8yTzBTYTJCZE9RbW5sZ3VoRTVKbW5sQlYxY1pBWVRpYWZHaHNIOThiSExaS0k5M0hvc1IwMFF0Q1R6V0FGN1dieVcvMUtMV0lHczk0WTBtZytOdG5RWEwwdjIiLCJtYWMiOiJjZTM2NTIzMzY4YTMyMTZjOTFmZWU1NTdhODQzMjI0ZDlmYjkwZTE4MWIwYzc5N2E5NjY1NzZmY2MwOGY5MTIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRzTEdSb2RnSlEzNWxBVitZbWlFSGc9PSIsInZhbHVlIjoiRDYyalp2dXlUZFBZa2xvcjJRN3l1dURDYktFeFdjeC8xTUxoWVZ2UUc0MlRXTGN5Z0taZkVLYU5wemdvQi9POUtLdGkybUNWM2l2TFFJdkl1YUMxNEtXZVJHUlFCaEVaVmRTVFJ1Y1JxQ0ZBd1hFZ21aVWVubDByTk1kd3FwRXkiLCJtYWMiOiIyMjg3OWZjZWExMTQ0NzVmYmJjMGYyZWZkMDc4MDYxNjE1MzkxZDUxNjQ5YmEwN2U1YzRjYTY0ODk5MmIzNzlmIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers

search
                                         45.79.27.198
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
x-powered-by: PHP/8.1.14
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IktSRElFWE1EZ25lSUpIc0x6NXcvNGc9PSIsInZhbHVlIjoiOFV2RFlPOUJScHJnR0ZQNGhqL2hOM0J3dWVMQWY3QXBvRXJlT1I0V0xLblp6dTd4cjUvMjUxTUtJRjdLUDdWdHNGelVPUXdVM05yUHlxL2dtelhvNGNIaUxsd1ViY2RDYVJpbEVOcmppU1dqaEdkZTNOTEE1a25ObEp6V1RpSWkiLCJtYWMiOiJjZGQ1ZmEzNmU4NWFjMTU1NjQ1NmZkZDg1MDNlMDYzZTMxYmY2ZDI3YjFiYjljMDYzNTY5MWMyYzZjZWJkZDBlIiwidGFnIjoiIn0%3D; expires=Mon, 06-Feb-2023 14:25:02 GMT; Max-Age=7200; path=/; samesite=lax; secure laravel_session=eyJpdiI6IkpMSHhUYlVLZnQ4ejByYU1RMnhMakE9PSIsInZhbHVlIjoiQ0NEOXJZTVNBdmFrYm8vL1BiczFYemVmSzZEVmZ4dkt4dno3NnJGZDBlK3Q3N2ZDcWlGOFZtRzFhREYwL0hvY2ozYk9DZ2lxWmVDcFZ5aFRYYkZ2VjlsTGJ1RG52Q0llZ1JwZGZUdHowbHFBckdlUjFwM05WYkh6eVdaNEdPSWMiLCJtYWMiOiJjMzI3NjI1MjM1N2RiMTU2ODExOTlkZjJiNWRjMmU0ZTdlODk1MGE2Yjg2MTdhNTE4NDkyMDIzZGZlMDMxM2M3IiwidGFnIjoiIn0%3D; expires=Mon, 06-Feb-2023 14:25:02 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure
vary: Accept-Encoding
content-encoding: gzip
date: Mon, 06 Feb 2023 12:25:02 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /api/v2/client/sites/2895475/visit-data?sv=6 HTTP/1.1 
Host: in.hotjar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 112
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Referer: https://mydhl-package.roxanaysebastiantango.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.77.39.192
HTTP/2 200 OK
content-type: application/json
                                        
date: Mon, 06 Feb 2023 12:25:05 GMT
vary: Accept-Encoding
cache-control: no-cache, no-store
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /releases/v6.2.1/css/free-v4-font-face.min.css?token=f7165dd215 HTTP/1.1 
Host: ka-f.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mydhl-package.roxanaysebastiantango.com/
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         172.64.168.22
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 06 Feb 2023 12:25:04 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:07 GMT
etag: W/"075b2106ba08d32bc88fff3724503b1e"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7f9417d4ec6b908629759ca97df0642c.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR52-C1
x-amz-cf-id: kF0JNVfHkg6QOOlW_a07-H_ELphIUjj_kwGDyg-MegGwtH0xYaVunw==
age: 146919
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rzV%2FaFq7X7cyvTLjnPA%2BCjOgGaTDju63ufHVoVixxOSTuxVeNXXZ0lGPnjbN0Bqko%2FEXFdNsZ%2FKBWEhryv66XNfhZfW3qC71dx36qiwxXbvCfcxIugrU1pMbDaa%2F2QnvzDak9pqaTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7953ddc9b9ec7717-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /releases/v6.2.1/css/free-v5-font-face.min.css?token=f7165dd215 HTTP/1.1 
Host: ka-f.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mydhl-package.roxanaysebastiantango.com/
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         172.64.168.22
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 06 Feb 2023 12:25:04 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:07 GMT
etag: W/"15e2713dff942747406520edde3fd0bf"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 d6030d5ab753695c0198f874d4276eb2.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: l2tApcfheV2P34r28Oyx7V28pRu4shUPjds4J--wX84Ryj-K10ZSsA==
age: 146919
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=42WVpByg%2BZLP3OlQsdJwB7ELWMLiY2mECoFo%2Fn7nzmlV6JBxUPgarmUELscqC8%2FWqMM00R97l18fABAEaLes1hQKpm0kkiWkvYndSQyi6ePragZmqJbNDXMePmhmZRrhAanmN4XoUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7953ddc9c9ff7717-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /releases/v6.2.1/css/free-v4-shims.min.css?token=f7165dd215 HTTP/1.1 
Host: ka-f.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mydhl-package.roxanaysebastiantango.com/
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         172.64.168.22
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 06 Feb 2023 12:25:04 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:08 GMT
etag: W/"0d00741459c51dd7330d97cd19326a7b"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7f9417d4ec6b908629759ca97df0642c.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR52-C1
x-amz-cf-id: CmDnJ-8W5dHnQti-hS6CrCTib3aVRU8AoXbi5OQRL_z2gymtrtKiTQ==
age: 146919
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FEQVwBk%2FFq8brb18OD2qTfp4bH3xOSiKWWTFahIC8HhT7y8cjOvhoid4vIUP%2BesBDRgak4XZBSBu0TiYtlxDmVj1HXWYittPMjbcIVti1uh3qaFpmcouLTx0xCl21nuBgW5WcENVZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7953ddc9ca057717-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /releases/v6.2.1/css/free.min.css?token=f7165dd215 HTTP/1.1 
Host: ka-f.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mydhl-package.roxanaysebastiantango.com/
Origin: https://mydhl-package.roxanaysebastiantango.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         172.64.168.22
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 06 Feb 2023 12:25:04 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 14 Nov 2022 15:06:08 GMT
etag: W/"2dbe34367e935e2684b01124b0860d71"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 7309328e91f012108061822748228b68.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: Z14G2qUM2uSOV1QfvMdEJUgKJomXfCpJODzEg0IQ9bsHWAKQy27J_g==
age: 146919
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vkAHihRs%2B8SYg11V4w1QRdHpMbxRHLZggK%2FUASdekOp47y5au4YpdnKIjEuZ5nxU2UgCkAcXOIvD2EKg%2BxeiBs1e4S7VrQV6N4AJqpZnjZG4%2FYjL4AEiUaaLU0mYeVoTHO5Ujn1d3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7953ddc9ca0d7717-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---