Report - britsekortharenelgatofeliz.com/

Report Overview

Submitted URL
britsekortharenelgatofeliz.com/
IP
5.61.249.21
ASN
#12859 BIT BV
Submitted
2022-11-24 01:29:20
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	55 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	4.4 kB	23.36.76.226
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.9 kB	34.160.144.191
www.mediawax.be	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	11 kB	76 kB	104.26.14.70
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
britsekortharenelgatofeliz.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	362 B	1.5 kB	5.61.249.21
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	3.6 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.83.91.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-24	medium	britsekortharenelgatofeliz.com/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	www.mediawax.be/landing/js/jquery.js	57 kB	2023-03-07	2024-04-26
Pretty URL www.mediawax.be/landing/js/jquery.js IP 104.26.14.70 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:03 Last Seen2024-04-26 06:08:05 Times Seen4869 Hash bb381e2d19d8eace86b34d20759491a5 3dc9f7c2642efff4482e68c9d9df874bf98f5bcb c8370a2d050359e9d505acc411e6f457a49b21360a21e6cbc9229bad3a767899 Loading...

	britsekortharenelgatofeliz.com/	29 B	2023-03-11	2023-03-11
Pretty URL britsekortharenelgatofeliz.com/ IP 5.61.249.21 ASN #12859 BIT BV Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 16:37:59 Last Seen2023-03-11 16:37:59 Times Seen1 Hash 250d7413c1ea846f9ac0b2894adfffba 11d0841c9936303d3db39498086fb9f981312e0f 3ff189d4fceebfdb357ad0c7ae6db151e65e342f1262e8152f6431fcde0fc803 Loading...

	www.mediawax.be/landing/js/pngFix.js	4.7 kB	2023-03-10	2024-02-26
Pretty URL www.mediawax.be/landing/js/pngFix.js IP 104.26.14.70 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 21:33:27 Last Seen2024-02-26 12:42:44 Times Seen12 Hash 332d080c0376ef3cca52cac7259ef7d3 3e6def3bc9b78dded3bcc1584435900ea061f5a6 174314b3a0d69ab9cbd67e33ed27bf494de92f20caf76c03f518044b8edbf9cf Loading...

	britsekortharenelgatofeliz.com/	53 B	2023-03-11	2023-03-11
Pretty URL britsekortharenelgatofeliz.com/ IP 5.61.249.21 ASN #12859 BIT BV Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 16:37:59 Last Seen2023-03-11 16:37:59 Times Seen1 Hash 876f10bc498984153f35e6b7e0f93a39 9ff8aec24756e9e327d65212aa684e683ed54ed5 0816403dbf35b11f5832b3d3262ce7775c6981d4cb8ccff96a742a812ccab936 Loading...

HTTP Transactions (51)

URL IP Response Size

britsekortharenelgatofeliz.com/

5.61.249.21

200 OK

1.1 kB

URL HTTP/1.1
britsekortharenelgatofeliz.com/
IP
5.61.249.21:0
ASN
#12859 BIT BV

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
1.1 kB (1112 bytes)
Hash
ae7fa506e8aabc0b2a94c80e9f454801
bcd28b3fbe9e1754c782c178918efbf0bf486730
1424ff5799fe313e6a36f1d521ed2f59cba9641aea9f618ef65b59d8004ee37b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: britsekortharenelgatofeliz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 01:29:09 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 27 Oct 2013 13:34:05 GMT
ETag: "bb1-4e9b909886d40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1112
Keep-Alive: timeout=2, max=100
Content-Type: text/html

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8574
Expires: Thu, 24 Nov 2022 03:52:03 GMT
Date: Thu, 24 Nov 2022 01:29:09 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5965
Cache-Control: max-age=124892
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 01:29:09 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 12:10:41 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8456
Expires: Thu, 24 Nov 2022 03:50:05 GMT
Date: Thu, 24 Nov 2022 01:29:09 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 01:18:53 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 616
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: /Z8JhYbtz73+9WoXiy6zoOsMv3ssMZ5KvLxdtIMk8gr4yNQqaFC2yx52QVTw6u9yL+BrxmJqRNcDHda9Uz8MCQ==
x-amz-request-id: SKDGA79YF1N9ACR3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 00:40:12 GMT
age: 2937
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

www.mediawax.be/landing/js/jquery.js

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/1.1
www.mediawax.be/landing/js/jquery.js
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /landing/js/jquery.js HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://britsekortharenelgatofeliz.com/

HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 01:29:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 24 Nov 2022 02:29:09 GMT
Location: https://www.mediawax.be/landing/js/jquery.js
Server-Timing: cf-q-config;dur=6.0000020312145e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=05jMjXgYN%2Fmx%2BO6qdE1i06gvSBBSaCVIpn%2Blyq%2F%2FuIf4kDlplXje5GNxce%2FYyWUejMO1htrErHkjvsgsnOys9lXPfWP76Sb1mlVuhUq1I46on5eCGB0j5dspoAMg9u1hgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76ee5f39ec22b51e-OSL
alt-svc: h2=":443"; ma=60

www.mediawax.be/landing/js/pngFix.js

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/1.1
www.mediawax.be/landing/js/pngFix.js
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /landing/js/pngFix.js HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://britsekortharenelgatofeliz.com/

HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 01:29:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 24 Nov 2022 02:29:09 GMT
Location: https://www.mediawax.be/landing/js/pngFix.js
Server-Timing: cf-q-config;dur=4.9999998736894e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xEDfD%2FgoQR65se8usR5rrGiKlkUKnSVQiOxHzdqdQi08kyzXruWi1hra%2FpfZ3gfmdbhhQAr2Hf3k%2FUDjGU%2Bm6BD7RoyI5dz6XgTYmPSWifEMjBc8vami1Y5K2bBcqAbO%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76ee5f39ed9a0b55-OSL
alt-svc: h2=":443"; ma=60

www.mediawax.be/landing/styles.css

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/1.1
www.mediawax.be/landing/styles.css
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /landing/styles.css HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://britsekortharenelgatofeliz.com/

HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 01:29:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 24 Nov 2022 02:29:09 GMT
Location: https://www.mediawax.be/landing/styles.css
Server-Timing: cf-q-config;dur=6.0000002122251e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yfRxThYbFPtC9iw6zbCPkaB0Rhwm75sExtwJBH6VrlltD4EwOwVIwtJmNE47vJUDHtdG2hjdoyitnZ7pFc3Fi6FCsCXF0x%2FeMSpgaviy3PnSLu%2Bsvi4QZiKaTV2w0vUtqw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76ee5f39eee2b503-OSL
alt-svc: h2=":443"; ma=60

www.mediawax.be/landing/Beeldmerk.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/1.1
www.mediawax.be/landing/Beeldmerk.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /landing/Beeldmerk.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://britsekortharenelgatofeliz.com/

HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 01:29:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 24 Nov 2022 02:29:09 GMT
Location: https://www.mediawax.be/landing/Beeldmerk.png
Server-Timing: cf-q-config;dur=4.0000000041118e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ihL4tMqprfkPDQdtw8XEUIG241C7ecgeHxCmPFjCXPZ3kzi%2B%2BgIMoxkl97SW%2BLiclr578yb58TlFChuO3x6AQalP9ICMnA92egYS9VXrxI25xwKznm7rWYGU39QmjcER5g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76ee5f39f83eb500-OSL
alt-svc: h2=":443"; ma=60

www.mediawax.be/landing/mediawax_125x125.gif

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/1.1
www.mediawax.be/landing/mediawax_125x125.gif
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /landing/mediawax_125x125.gif HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://britsekortharenelgatofeliz.com/

HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 01:29:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 24 Nov 2022 02:29:09 GMT
Location: https://www.mediawax.be/landing/mediawax_125x125.gif
Server-Timing: cf-q-config;dur=7.0000005507609e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eMrIzTxs3AtyO4iCkG8Rlx9jQWMJxp147wPUn2j%2BG4vopoVFwr66h6LiSwuXc9hba4HAdZbo%2FbgWYAu0PW3WaL9Z%2BNhdF3zMAvQ%2FML0EumGXZILeFfztLCT%2F2gGKHE3mgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76ee5f39ff43b517-OSL
alt-svc: h2=":443"; ma=60

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/1.1
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://britsekortharenelgatofeliz.com/

HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 01:29:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 24 Nov 2022 02:29:09 GMT
Location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
Server-Timing: cf-q-config;dur=4.9999998736894e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uf9xOcial9adyMJs3J7%2FQklWW2ioMu7Jzas3LoXpAD%2BY3nC3AToN4lC3ySwoJPDwZK26fy3v3kVvp9W1aHPPsEOuMX3e1Ly4f4XytLU6oOW0NDoezr5HDhZ3iSPTxyQMyA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76ee5f39ffc3b4f9-OSL
alt-svc: h2=":443"; ma=60

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 01:29:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
a5a4a086860eedd8af5bb706b7c7966d
177abaa3a539838deb2d8e01d22f01ec7570fee2
c1ed902eac5051f9605de553ec93a3d882a1d75b71d808a95f8d63992de83354

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=96211
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 01:29:09 GMT
Etag: "637d9db8-117"
Expires: Fri, 25 Nov 2022 04:12:40 GMT
Last-Modified: Wed, 23 Nov 2022 04:12:40 GMT
Server: nginx
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
a5a4a086860eedd8af5bb706b7c7966d
177abaa3a539838deb2d8e01d22f01ec7570fee2
c1ed902eac5051f9605de553ec93a3d882a1d75b71d808a95f8d63992de83354

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=96211
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 01:29:09 GMT
Etag: "637d9db8-117"
Expires: Fri, 25 Nov 2022 04:12:40 GMT
Last-Modified: Wed, 23 Nov 2022 04:12:40 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
a5a4a086860eedd8af5bb706b7c7966d
177abaa3a539838deb2d8e01d22f01ec7570fee2
c1ed902eac5051f9605de553ec93a3d882a1d75b71d808a95f8d63992de83354

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 01:29:09 GMT
Etag: "637c4c2c-116"
Server: ECS (amb/6B9C)
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
a5a4a086860eedd8af5bb706b7c7966d
177abaa3a539838deb2d8e01d22f01ec7570fee2
c1ed902eac5051f9605de553ec93a3d882a1d75b71d808a95f8d63992de83354

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=96211
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 01:29:09 GMT
Etag: "637d9db8-117"
Expires: Fri, 25 Nov 2022 04:12:40 GMT
Last-Modified: Wed, 23 Nov 2022 04:12:40 GMT
Server: nginx
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
a5a4a086860eedd8af5bb706b7c7966d
177abaa3a539838deb2d8e01d22f01ec7570fee2
c1ed902eac5051f9605de553ec93a3d882a1d75b71d808a95f8d63992de83354

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=96211
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 01:29:09 GMT
Etag: "637d9db8-117"
Expires: Fri, 25 Nov 2022 04:12:40 GMT
Last-Modified: Wed, 23 Nov 2022 04:12:40 GMT
Server: nginx
Content-Length: 279

www.mediawax.be/landing/Beeldmerk.png

104.26.14.70

200 OK

10 kB

URL HTTP/2
www.mediawax.be/landing/Beeldmerk.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 238 x 186, 8-bit/color RGBA, non-interlaced\012- data
Size
10 kB (10030 bytes)
Hash
adc98e76f62cc73ee66336620b0e0be9
8f88a0b4d9d8f2d1c79439775e7005780941ebaf
a6c9cac8c4860509374dbe614203ae7706ead76c45e4bd6f6ad8f7dd053267bf

HTTP Headers

GET /landing/Beeldmerk.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 01:29:09 GMT
content-type: image/png
content-length: 10030
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 09 Apr 2020 14:59:55 GMT
etag: "272e-5a2dcde9eb0c0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jD9BBCQSmUq2rplKqsJMkNP5m%2FAfrD59V1VfzH4tbVqqrutDGV4YH2vxexqgFHH8wKzjKyPFzZq9vVVtJt2xv2I2rd5BhmCAmgsBIlXt5RQ8%2BNWDCiDBAXdqDUdoOLX2dg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ee5f3b2d80b4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/landing/mediawax_125x125.gif

104.26.14.70

200 OK

14 kB

URL HTTP/2
www.mediawax.be/landing/mediawax_125x125.gif
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 125 x 125\012- data
Size
14 kB (13910 bytes)
Hash
1129c2e07d11f1762cbab137684359dd
cb1222ca98681b683d814dbd6cc15fc9713a87a2
3ca32865a9182d2a6b869cb58ef10bd531e69b459c1ebce1672dedd156862562

HTTP Headers

GET /landing/mediawax_125x125.gif HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 01:29:09 GMT
content-type: image/gif
content-length: 13910
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 09 Apr 2020 14:59:58 GMT
etag: "3656-5a2dcdecc7780"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nl9jQY1nCqJA4drw9RHyQ7uqMFbwOMAP24x519BsIA%2BXowfbkXEUCynULVhx9FRMh7i%2BLu3G4J5MjeoezSv2gOfEjO0IMQhK4fptI5YzaDWFfl1d5fy4AMRUbMUCQf30eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ee5f3b2d82b4e8-OSL
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 01:11:11 GMT
cache-control: public,max-age=3600
age: 1079
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

www.mediawax.be/landing/images/bg/bg-content-header.jpg

104.26.14.70

200 OK

402 B

URL HTTP/2
www.mediawax.be/landing/images/bg/bg-content-header.jpg
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x77, components 3\012- data
Size
402 B (402 bytes)
Hash
63a0e74e45b6444ca770ca30560f75b3
de274d1c50aa7ad0d72ee8ae9099e09a6d268337
027450884639e4b848defd59e3a53fb4a6ddf430ac2bb560a1e3e618db14a965

HTTP Headers

GET /landing/images/bg/bg-content-header.jpg HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mediawax.be/landing/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: image/jpeg
content-length: 402
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 09 Apr 2020 14:59:57 GMT
etag: "192-5a2dcdebd3540"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kb6F9bsWj47XHPHHdBzqU6FiW95nAReT3svT8oxCv%2FNTonsndo%2BOmGE0wceUL0nSG9Sc3yNs5kq8h6IUpeEDmmsjIYoV9GPvmN3pk%2FX%2BDb0Gftu60Q%2FO16KdVtxWpND5Zw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ee5f3d3ef9b4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/landing/images/bg/bg-page.png

104.26.14.70

200 OK

644 B

URL HTTP/2
www.mediawax.be/landing/images/bg/bg-page.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 1 x 620, 8-bit/color RGB, non-interlaced\012- data
Size
644 B (644 bytes)
Hash
3b24d5e2f63de1118fe6a5c43c3bcfdf
11ef92461b2200410e02d13d373c4d534580f523
a4be27d735c0be92586b86ad1c25659a2aa7318a01267688eaaab7ec2050e3ce

HTTP Headers

GET /landing/images/bg/bg-page.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mediawax.be/landing/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: image/png
content-length: 644
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 09 Apr 2020 14:59:58 GMT
etag: "284-5a2dcdecc7780"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x8A1ZFEjyMfNuI2z6KY4CO2wQtYCIpndl%2FlRBWw9Lh6Lof8C%2BfypzADj4cz8e73%2FLd5o5DDFTeegjYschlAcoOqCacsBg2KDGVSQKW6yQlr%2FEjTrr84IuVBJM3lNFY%2BerA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ee5f3d3ef8b4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/landing/images/bg/bg-content-lower.jpg

104.26.14.70

200 OK

366 B

URL HTTP/2
www.mediawax.be/landing/images/bg/bg-content-lower.jpg
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x154, components 3\012- data
Size
366 B (366 bytes)
Hash
075aad17fc864c864dd2d8f4f92e12f4
7c6e43eaff0bd536faca82827719bd9b2efdb2e7
c48532be72f89b2b000b26f1ca5e9b26e547a897c6f6463ca0d2c9914ebe23d6

HTTP Headers

GET /landing/images/bg/bg-content-lower.jpg HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mediawax.be/landing/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: image/jpeg
content-length: 366
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 09 Apr 2020 14:59:58 GMT
etag: "16e-5a2dcdecc7780"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uQrSXH48u7r0DhDGFy8Chh82TtlvRprV9oNYoWFeKqwKOflEwxpmiTInxCyZZkYICsHwboVm6uqRbvgNSkYCaSjz9bEh9NdDKPFn3ZJtPGWWKVYqNU%2FsJZO%2FCXsjtWLaBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ee5f3d3efcb4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/landing/images/bg/bg-content-footer.jpg

104.26.14.70

200 OK

332 B

URL HTTP/2
www.mediawax.be/landing/images/bg/bg-content-footer.jpg
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x39, components 3\012- data
Size
332 B (332 bytes)
Hash
c015553960375a183e3bc5cd0af758d1
deac0ca5d42381766b4c2737a30bcada81dfb496
3460dd575dc6a346b45077a1af18ce92d74794a440b73859f3d7b12549c0f291

HTTP Headers

GET /landing/images/bg/bg-content-footer.jpg HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mediawax.be/landing/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: image/jpeg
content-length: 332
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 09 Apr 2020 14:59:58 GMT
etag: "14c-5a2dcdecc7780"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VL5tCqO%2B6Q0NSfuVUF7WggRn9dHhUOx79rTnYM0j5TZlEuVwk7dQ69%2BJZpWimomWTJMWpQ0d0ZShES1vAyFCy4dBgXQYK6r%2FOBod07DglqwccP%2BOfybNhb3eldiZRB2E%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ee5f3d3efeb4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

471 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q6mDKKLcNrxneuTrAZgFGIHolM8wlSjnEZ9ET5zsqJH1M%2Bqgk6DU%2FXQsvXwBsOzWP83aVMYJB5%2BI3ml29IfUSjmRfjF5cmTcsW83IXvJMJfG0nuzw7uSRvPyeBCywsp2%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3e5f88b4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/landing/images/bg/bg-content-upper.jpg

104.26.14.70

200 OK

28 kB

URL HTTP/2
www.mediawax.be/landing/images/bg/bg-content-upper.jpg
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 796x306, components 3\012- data
Size
28 kB (28380 bytes)
Hash
6f258d5c679d41d104252e143cb5f122
188add592af7964451f0a9553b06493d9bf9e1d4
5372f86a5e7e6bccd4092432cd6830ab9f2f2012330d0e5df95c78a06714bd10

HTTP Headers

GET /landing/images/bg/bg-content-upper.jpg HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mediawax.be/landing/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: image/jpeg
content-length: 28380
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 09 Apr 2020 14:59:58 GMT
etag: "6edc-5a2dcdecc7780"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xNCu%2F6RYZqZnCBn6I6aVZnPWrgiARTBL97pA11opFaTZSOLIgvo9cvF1azAXEAsb4qx1pcvyU6%2BUBmKKvhtolaRKhbBzYASQJikeDE%2FlIqGfO%2BDVYQvHz4LstovwhbpM1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ee5f3d3efab4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

315 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yAvokfmxg3BkuWwAhbTjASNKfXo4HueMUxyg%2BxYVyoOocHptFdA2RpSC4u%2F7M9FSVoJJd7EBxgvzW5Kw2KkxnxgFdN6s7c8ifrF6ZbXbjkwGceLx86KY7IKAs3WQ8rbnWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3eefc5b4e8-OSL
X-Firefox-Spdy: h2

push.services.mozilla.com/

35.83.91.138

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.83.91.138:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IyccprtFJD3yYOacvFTs3w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DqlmcDZGHVeX0MvAQTdTmbf+TAY=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17941
Expires: Thu, 24 Nov 2022 06:28:12 GMT
Date: Thu, 24 Nov 2022 01:29:11 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17941
Expires: Thu, 24 Nov 2022 06:28:12 GMT
Date: Thu, 24 Nov 2022 01:29:11 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17941
Expires: Thu, 24 Nov 2022 06:28:12 GMT
Date: Thu, 24 Nov 2022 01:29:11 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7589 bytes)
Hash
06c6e720bc9900b38e88cd72f739603e
22884cbc78622d6f78c1c3397c9b440946144a99
8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nwXP5jm9A2Cl3_-Lm194ycXkeClig1L9hwgUgE8i8NF-Vv2gNfj_4Q==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 15:14:08 GMT
age: 36903
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.0 kB (7993 bytes)
Hash
92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:47:06 GMT
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
age: 13325
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd52586ca-ed31-419d-866f-7a7d8c034cc2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6404 bytes)
Hash
dcdebbc7d6d2f262afe69e6f2d97d58b
e62b4e08c2813f67fa0f466b4f66d5d4c609526f
decdfd76f2b382026f13ba2cd07fceae8a8964b4157c0f4dcef6bcd061817b61

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd52586ca-ed31-419d-866f-7a7d8c034cc2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6404
x-amzn-requestid: 5a69edc8-b240-4c21-ba0d-dc175b8ff3b5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvY6HfnoAMFQag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5d2-4fd0613627b92d636337cbad;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JBcELEHpSjhEJpgL7NWxlolY0Vt_b5RYE9zJyiBgIIZvf2re37TnaQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 07:11:33 GMT
age: 65858
etag: "e62b4e08c2813f67fa0f466b4f66d5d4c609526f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.5 kB (7462 bytes)
Hash
b4157f2c5c3c77ce699324ecb08f47c7
a7d9135f9d01ba13c3cdaf8b038c70212f159297
2305f7afee95bb34d9e8dbff571c6b146ba7b694be96e9e925c32d1f41785916

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7462
x-amzn-requestid: 1f6fb14d-83e0-43d3-9dab-5bc83af1a7c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwV3HV9oAMFs9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9425-634d43db6308e0be596aa5a0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GW5UTfY7-TwPWTno9z1e21a2cA9fmU7GfHFYWdL-zQvMLxeq-S9Trg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:03:54 GMT
age: 12317
etag: "a7d9135f9d01ba13c3cdaf8b038c70212f159297"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13882 bytes)
Hash
64d79191f005c9876b952c5f948aa0f7
1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13882
x-amzn-requestid: 9022b0b3-31d5-4149-a969-02514f11b95a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvzNHjMoAMFWMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9347-0e8354a02bef623644714e31;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ve4q5FDkwMGhPK6ZVVVCZtoBTaGaz43r_PwINzwS5Nx5tcZeQkVIfw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:47 GMT
age: 13164
etag: "1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6dee69c-a683-4448-a26a-ed78ea0cb4a0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.6 kB (5553 bytes)
Hash
0b88331b5cbc633ee1ae21a77a983e92
acc9dd298e87e1079229d2c958ec088023603974
299e0c024f5209289e27aea403337e05ec7da447e706eee79aae6e982986faee

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6dee69c-a683-4448-a26a-ed78ea0cb4a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5553
x-amzn-requestid: 203724f3-e044-4533-ae46-af79c11e5460
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b_c6lFucoAMFs7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c7510-4dad6a426642a025759eb363;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 07:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JRqctghettaL53ADxhP7pd9gib0TsC6RZI8ERQldNYuusuha5qohpg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 07:16:46 GMT
age: 65545
etag: "acc9dd298e87e1079229d2c958ec088023603974"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:09 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fbrc1Manz7TtK8t0bBTPYrIFgRW9OpuKihC3Ok%2FG37Z8Y9kTBJjIDVYU4z6WuxGI8VfBRBluto6STLI0PcTXeJ0EKheVRQlRrs0jQmIYkkRnI2lotVP2hQm86MkrODK52A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3d3f00b4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GDpWZYOqNKgJSvmmiOYzPA4qXISNr6pPkLLaq3h88ZeI3TRkYaRqnStlYZrN4beX12Ey69Cy1iuhzPV58CpaWU6DTD0I9cPT48bOeydFMINX6E%2B2hmOUyqTQQlbg%2BkN6zQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3eafaab4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=orhEDi0QdK0WxfUPsRg4bnpooGKYsgVabyz5VsHn4ZGNr5zJ13fzcsTOlwpX3PzrN3h9o%2FZ04ugQ01o49BLwZI6N89AgDsASlwavMs6zGWKGE3F7MjCprWmhsbXqUPzydg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3ecfbeb4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wq5O45JnjB5vgnSAK696iALEAOTay4TGZTSBgOwj%2BMrTD4RpaH4pvqbvd9Ip%2FUxVuml%2FSDD5xUiz8Pluo79kGp0N2qDNPa6xeSNt4yzqz86SS7FCsL%2BOGzFAXaWRSlffFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3ddf51b4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Z2FDf2qYLDEJGod65j7CVPeg5Y9RxddruVv%2FeI2NSRO9JFMCMntKV4o7j9HM799OFBhZAXbhK96o5%2BZ%2FzieDZO%2Fvl65Bl6f%2BPbfctUc%2BBKT%2FYO2AxVlUZNDVTpAb3RzOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3e3f7ab4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5CubU%2Fqf8HM6cD5%2BaOsSAAeHNZv00sEcNALKxoiRj3UZLexBlfmc2KL%2FJ8rvqflh7HK5%2BzIDrkS8SvbAcFKEcA5ZdxRV6JPEFKtDQXwxZw7uco0P9t%2BlzVZKO7skCdcYlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3e7f92b4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/landing/js/pngFix.js

104.26.14.70

200 OK

0 B

URL HTTP/2
www.mediawax.be/landing/js/pngFix.js
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /landing/js/pngFix.js HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 24 Nov 2022 01:29:09 GMT
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 09 Apr 2020 14:59:58 GMT
etag: W/"123b-5a2dcdecc7780-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rgv97fX9XgCbQo0iKHuizEfCe7rIOL%2FblcwLWkCbuwlOtUsVtkBMO1vvhBCogFQHjzdpHSmvk5lbjBZnkpCYBCV6GivK7LMjL9fU0ZCVnr9S2bsP6hpL31Itbwosxzx1fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3b4da7b4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:09 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FQjq0RQeIfEP%2BvUzNuVmNxZpeESaC%2FMfi4%2BSocuUJcjeez4HnvnK786917flsmlIwu2dAKW4UyG%2FLC9ztASSsXwdQJbPcB3iLPX9vgptT1yc%2B7iQKIdJ4Y1rwveXsaIhqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3b1d7fb4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:09 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tFO6gFTkOqin%2Bx338M4lgGapM2inRratuUZf9694%2BCejJX7pBAw09MO%2FmslBsm3Udq0v6jFX0zwqdkBcmBuFXxPr9LtCCELTQGLIwzDTeaKFo%2FvLLRSnhBHnUEf9l69iyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3c7e4fb4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DcepEyN2CrM%2BAKXn9%2FMVURGDlkwhEAutMyTQF6g%2FGWK0iYjJ%2Bgg1EBaAYrJm7xT4SsdgH5fCR2VmMPrXWSVxIncKOrOxJBgvkdO5hyff9k0hWg5vMfggyrn07TtQbdML6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3d7f17b4e8-OSL
X-Firefox-Spdy: h2

www.mediawax.be/landing/js/jquery.js

104.26.14.70

200 OK

0 B

URL HTTP/2
www.mediawax.be/landing/js/jquery.js
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /landing/js/jquery.js HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 24 Nov 2022 01:29:09 GMT
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 09 Apr 2020 14:59:58 GMT
etag: W/"dfa6-5a2dcdecc7780-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=570ElK2H4yW24lIXpG5x4SW1YNmBP8n0KVPFlGS5zkiAqMkm2mhPF72cc%2BK97wznRtqBOGYvJ%2F409wBf816i0VxOOxVYuy3Zea2H6e3dYoav0UrQVxvvupP%2B6fYMLW3u1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3b1d7eb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.mediawax.be/landing/styles.css

104.26.14.70

200 OK

0 B

URL HTTP/2
www.mediawax.be/landing/styles.css
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /landing/styles.css HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 24 Nov 2022 01:29:09 GMT
content-type: text/css
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 09 Apr 2020 14:59:58 GMT
etag: W/"a91-5a2dcdecc7780-gzip"
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sgc%2B0V4Tqzzx8GA922l93%2FMRvnVdR7Tbkc%2FrPk5kFsKmbMx0WjBxd2qgF6FLxgLOaAaYpwyGossb6YvwYr%2B%2F1TfjdeHqPDtrGYAl49XPvGU0FSIJtNSRuVtD7O65wrS95A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3b2d8bb4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.mediawax.be/uploads/images/logo/smediawaxlogo.png

104.26.14.70

301 Moved Permanently

0 B

URL HTTP/2
www.mediawax.be/uploads/images/logo/smediawaxlogo.png
IP
104.26.14.70:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /uploads/images/logo/smediawaxlogo.png HTTP/1.1
Host: www.mediawax.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://britsekortharenelgatofeliz.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 01:29:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.mediawax.be/uploads/images/logo/smediawaxlogo.png
x-powered-by: PHP/7.3.33
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: User-Agent, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KhXEMGpo2xCdh39eb0Z280oDhpkZF58p5c5DMaFjdJmgCllC8mzYJS0%2B8Zn2V9ONX78kVpnagDPPdnKo%2BrePnjhfTqsideWdpk0q4Y4wz2QMeQDZsDOQ6LWm5OWiInNm0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ee5f3effcfb4e8-OSL
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (51)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type