r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 234b80a5a27f3d377e322e680413479d
3da8ba535ec19898f5b83ece48cd4038ac2bf557
370104df5dd8f739601a4be42ae41bb92f365dcf585823a3c14733f7c394e926
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "370104DF5DD8F739601A4BE42AE41BB92F365DCF585823A3C14733F7C394E926"
Last-Modified: Sun, 12 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15491
Expires: Mon, 13 Mar 2023 18:15:16 GMT
Date: Mon, 13 Mar 2023 13:57:05 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 405abd45d42535567c1ecb518f4bdb04
0505c27fe2921bfa89657173fb77ca7280f04772
bdef4e5edfe0bf3fefb4dc5625e41f3faeb23a0afd24c4e6255f40f757568c35
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDEF4E5EDFE0BF3FEFB4DC5625E41F3FAEB23A0AFD24C4E6255F40F757568C35"
Last-Modified: Sun, 12 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7546
Expires: Mon, 13 Mar 2023 16:02:51 GMT
Date: Mon, 13 Mar 2023 13:57:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 13 Mar 2023 13:14:08 GMT
content-type: application/json
age: 2577
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 8b1778005daa3ea807573992adbd0452
4cf2aaf44073506371c1e21970a18b9eab00622f
5f74233b9cc53b0ba6149fce51f6b31c2edb892b0a95b48e66b15ee9f59525ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5F74233B9CC53B0BA6149FCE51F6B31C2EDB892B0A95B48E66B15EE9F59525AD"
Last-Modified: Sun, 12 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10663
Expires: Mon, 13 Mar 2023 16:54:48 GMT
Date: Mon, 13 Mar 2023 13:57:05 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ryKULx+jdHPk4NETf8HwZ4tFdPlupoKOkje3dmZAGC2A/HCDrJM4ozfVt3KV0LEkHBijztRmNJg=
x-amz-request-id: TR95KN5TKMMKH2VV
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 13 Mar 2023 13:46:24 GMT
age: 642
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 13 Mar 2023 13:57:05 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/?cont=QHdhcnJpb3Jib3kwOQ==&token=55899275402e31442a06c5908e64d791
192.185.31.154200 OK 42 kB URL HTTP/1.1 starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/?cont=QHdhcnJpb3Jib3kwOQ==&token=55899275402e31442a06c5908e64d791
IP 192.185.31.154:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (2014), with CRLF line terminators
Hash 114c0c1cedd8532b75ce19c3188b0855
cd130cfed11138a972385e4266e573709ad275a3
19bbe886deb0a7add096a0eeca521dbff045a23008ab1fb647d260bb619db077
GET /nusenda/555d84d1471cb0f5646733231f0714f6/?cont=QHdhcnJpb3Jib3kwOQ==&token=55899275402e31442a06c5908e64d791 HTTP/1.1
Host: starlightegypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:05 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=f92b3o4rtheidpe4meiukhb483; path=/
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/tecton/v1.8.5/q2-tecton-theme.css
192.185.31.154200 OK 5.3 kB URL HTTP/1.1 starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/tecton/v1.8.5/q2-tecton-theme.css
IP 192.185.31.154:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash ef75ad9db026fd7e674239d05e6502e3
40ba60dfab70cfd00b4920e7e89a920539d74014
26883c16c1f3b499ccdded9d093bf7926879cb12ce629898a91fa3d13519b88b
GET /nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/tecton/v1.8.5/q2-tecton-theme.css HTTP/1.1
Host: starlightegypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/?cont=QHdhcnJpb3Jib3kwOQ==&token=55899275402e31442a06c5908e64d791
Cookie: PHPSESSID=f92b3o4rtheidpe4meiukhb483
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 13 Mar 2023 13:36:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5282
Keep-Alive: timeout=5, max=75
Content-Type: text/css
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 0dcb64c2f1edc4c2d8e81718261281ee
d9429f940ff33d9176fc94eb759ecb3d0f83ada5
4aac98d2ea104410ee557819e78e3b041d1d3dba64b1f7768a685ada4143df94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 13 Mar 2023 13:57:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/tecton-590048df214033d1c1591d552a32c9af.css
192.185.31.154200 OK 1.9 kB URL HTTP/1.1 starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/tecton-590048df214033d1c1591d552a32c9af.css
IP 192.185.31.154:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash f9181475c79de5f45f13c3b886380183
0faecd308c80010d0d46c41b7a0fcb84493d675f
092531276d805415e3f570c610aa9c138597c8cb5a973a9694789a7550130729
GET /nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/tecton-590048df214033d1c1591d552a32c9af.css HTTP/1.1
Host: starlightegypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://starlightegypt.com/
Connection: keep-alive
Cookie: PHPSESSID=f92b3o4rtheidpe4meiukhb483
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 13 Mar 2023 13:36:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1923
Keep-Alive: timeout=5, max=75
Content-Type: text/css
starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/app.css
192.185.31.154200 OK 28 kB URL HTTP/1.1 starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/app.css
IP 192.185.31.154:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 25e389960a3e7b8148ab8c356c2e4ff2
7f5a19391c104e71d90f67421007f6ee19c415f8
92e61db175214917c599260734bb33de25993b753ae9009be3e4e4a749fb451a
GET /nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/app.css HTTP/1.1
Host: starlightegypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/?cont=QHdhcnJpb3Jib3kwOQ==&token=55899275402e31442a06c5908e64d791
Cookie: PHPSESSID=f92b3o4rtheidpe4meiukhb483
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 13 Mar 2023 13:36:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Pragma, Last-Modified, ETag, Retry-After, Cache-Control, Content-Type, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 13 Mar 2023 13:12:32 GMT
age: 2674
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash cb05b1e094bb98b832c5eaa7815e84b7
8b86ac079ecfbda98e4c3f2501051000a29bfdc9
0b6fc7306415869814b3bd953f0fb43ad08033202d069b1c1ae65e8d860ba1b8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:06 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 11 Mar 2023 17:40:02 GMT
Expires: Sat, 18 Mar 2023 17:40:01 GMT
Etag: "8b86ac079ecfbda98e4c3f2501051000a29bfdc9"
Cache-Control: max-age=444774,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7a74c8bb7a87b529-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash cb05b1e094bb98b832c5eaa7815e84b7
8b86ac079ecfbda98e4c3f2501051000a29bfdc9
0b6fc7306415869814b3bd953f0fb43ad08033202d069b1c1ae65e8d860ba1b8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:06 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 11 Mar 2023 17:40:02 GMT
Expires: Sat, 18 Mar 2023 17:40:01 GMT
Etag: "8b86ac079ecfbda98e4c3f2501051000a29bfdc9"
Cache-Control: max-age=444774,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7a74c8bb7c32b518-OSL
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash db27ecc2f481e8871b2e99584e751660
e671ecb839d53e296f4ec303208ddb713c72aecc
5c910268b5c4f0244540c5570056673f8cbe4a0979f301363cb56dc359c147df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C910268B5C4F0244540C5570056673F8CBE4A0979F301363CB56DC359C147DF"
Last-Modified: Sun, 12 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15692
Expires: Mon, 13 Mar 2023 18:18:38 GMT
Date: Mon, 13 Mar 2023 13:57:06 GMT
Connection: keep-alive
starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/theme-q2-d4bd5c0f67463dc74ceffd3139ffd704.css
192.185.31.154200 OK 238 kB URL HTTP/1.1 starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/theme-q2-d4bd5c0f67463dc74ceffd3139ffd704.css
IP 192.185.31.154:0
ASN #46606 UNIFIEDLAYER-AS-1
Size 238 kB (238338 bytes)
Hash 0fada9ae269b407021787917696d97db
d599d2622d723e0f5e5eecee74274b1cb71d12c2
a3eb3560b4dc56a935c15c6cd9fc361f5c97a92ec83ff6900f6090f73b6298a0
GET /nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/theme-q2-d4bd5c0f67463dc74ceffd3139ffd704.css HTTP/1.1
Host: starlightegypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/?cont=QHdhcnJpb3Jib3kwOQ==&token=55899275402e31442a06c5908e64d791
Cookie: PHPSESSID=f92b3o4rtheidpe4meiukhb483
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 13 Mar 2023 13:36:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css
starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/highcontrast-e95bf772b0d5d35d8c1afdd877eace57.css
192.185.31.154200 OK 238 kB URL HTTP/1.1 starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/highcontrast-e95bf772b0d5d35d8c1afdd877eace57.css
IP 192.185.31.154:0
ASN #46606 UNIFIEDLAYER-AS-1
Size 238 kB (238111 bytes)
Hash c357d22cbfd9e2e5790c2a3eb35b341a
3d3a472dc3c67cd1d020756b7a77949b5e5c7de4
851eb2370f9c20bce90a216a0d1e27f30e4e02b3f6160723ab5d5d7184092b8f
GET /nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/highcontrast-e95bf772b0d5d35d8c1afdd877eace57.css HTTP/1.1
Host: starlightegypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/?cont=QHdhcnJpb3Jib3kwOQ==&token=55899275402e31442a06c5908e64d791
Cookie: PHPSESSID=f92b3o4rtheidpe4meiukhb483
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:06 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 13 Mar 2023 13:36:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=75
Transfer-Encoding: chunked
Content-Type: text/css
starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/images/ncua-10a8bacb622921a5a7836a5dadcc76a6.png
192.185.31.154200 OK 20 kB URL HTTP/1.1 starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/images/ncua-10a8bacb622921a5a7836a5dadcc76a6.png
IP 192.185.31.154:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 400 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 10a8bacb622921a5a7836a5dadcc76a6
82dc46e3efc988232a7d657013e3a8791813f4f4
75ded5a988d1c3af9c23a6c3ca361284d649ceac20dcb12a68eb082da51b6a0b
GET /nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/images/ncua-10a8bacb622921a5a7836a5dadcc76a6.png HTTP/1.1
Host: starlightegypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://starlightegypt.com/
Connection: keep-alive
Cookie: PHPSESSID=f92b3o4rtheidpe4meiukhb483
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:06 GMT
Server: Apache
Last-Modified: Mon, 13 Mar 2023 13:36:42 GMT
Accept-Ranges: bytes
Content-Length: 20248
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: image/png
push.services.mozilla.com/
35.162.52.254101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.162.52.254:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2gULMyJK2DpBTOmFx443oA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hv49dNe+EdzPCfjspxGrCP4PcaA=
starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/fonts/OpenSans/OpenSans-Regular.woff
192.185.31.154200 OK 25 kB URL HTTP/1.1 starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/fonts/OpenSans/OpenSans-Regular.woff
IP 192.185.31.154:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 24872, version 1.0\012- data
Hash 38d2282372e8ddb41bd199b5f9415648
657441cea2cfd59821e0b741be20ad7fdce0cbba
95915582ecc56aa27829e7bd118b423f09cba0856ce517fdcd82e4e05726e6e6
Analyzer Verdict Alert fortinet Phishing
GET /nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/fonts/OpenSans/OpenSans-Regular.woff HTTP/1.1
Host: starlightegypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/tecton-590048df214033d1c1591d552a32c9af.css
Cookie: PHPSESSID=f92b3o4rtheidpe4meiukhb483
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:07 GMT
Server: Apache
Last-Modified: Mon, 13 Mar 2023 13:36:42 GMT
Accept-Ranges: bytes
Content-Length: 24872
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: font/woff
starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/fonts/OpenSans/OpenSans-Semibold.woff
192.185.31.154200 OK 25 kB URL HTTP/1.1 starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/fonts/OpenSans/OpenSans-Semibold.woff
IP 192.185.31.154:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 24952, version 1.0\012- data
Hash 8820d0e206a5b8fc0167d92acbbf4ee1
e6c1970c32b2fceecb901d3e338e2d32e8ac1b8c
5e335db7f8ef9f87be9dcc9c56f071d27a7b5bbd9111cfcdabd6babe5eb4e968
Analyzer Verdict Alert fortinet Phishing
GET /nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/fonts/OpenSans/OpenSans-Semibold.woff HTTP/1.1
Host: starlightegypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/base/4.4.0.113/assets/tecton-590048df214033d1c1591d552a32c9af.css
Cookie: PHPSESSID=f92b3o4rtheidpe4meiukhb483
HTTP/1.1 200 OK
Date: Mon, 13 Mar 2023 13:57:07 GMT
Server: Apache
Last-Modified: Mon, 13 Mar 2023 13:36:42 GMT
Accept-Ranges: bytes
Content-Length: 24952
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: font/woff
devilsms.live/cleave.js
199.188.200.254200 OK 18 kB IP 199.188.200.254:0
File type Unicode text, UTF-8 text, with very long lines (1712)
Hash fe9f66e28ad0fde897ddcb9571324491
e5ab8ed2bad2578458397898778be698dff70917
ece3c9456921c261029e7ae1b7eddd2265e8afdf1aeb78f9eafad2ea55d5e92f
GET /cleave.js HTTP/1.1
Host: devilsms.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starlightegypt.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 20 Mar 2023 13:57:06 GMT
content-type: application/javascript
last-modified: Sun, 30 Jan 2022 13:07:42 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 18428
date: Mon, 13 Mar 2023 13:57:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
devilsms.live/clver-min.js
199.188.200.254200 OK 66 kB URL HTTP/2 devilsms.live/clver-min.js
IP 199.188.200.254:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 20d5ae69455c70ce5bcf83bb4d158e13
ecf50f1168530a0661f1bb68ff809929c7f09236
7812cc28312944bca78b665a21dde0e70f9421bb848668c3066867d5c519d04f
GET /clver-min.js HTTP/1.1
Host: devilsms.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://starlightegypt.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Mon, 20 Mar 2023 13:57:06 GMT
content-type: application/javascript
last-modified: Sat, 26 Nov 2022 08:05:59 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 65986
date: Mon, 13 Mar 2023 13:57:06 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/images/favicon-285f45ebc3fe4b344d496ff87a937e2a.ico
192.185.31.154404 Not Found 4.7 kB URL HTTP/1.1 starlightegypt.com/nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/images/favicon-285f45ebc3fe4b344d496ff87a937e2a.ico
IP 192.185.31.154:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (358)
Hash e6aae2410885df2f2629465b60a2691d
859d3d883fb8ca2aadedf5753abcd7acce922479
a113d210f17827a95d9d1eee68bf4e0aa8bd39d67df1d9420ff5e9c0f49b1d48
Analyzer Verdict Alert fortinet Phishing
GET /nusenda/555d84d1471cb0f5646733231f0714f6/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/images/favicon-285f45ebc3fe4b344d496ff87a937e2a.ico HTTP/1.1
Host: starlightegypt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://starlightegypt.com/
Connection: keep-alive
Cookie: PHPSESSID=f92b3o4rtheidpe4meiukhb483
HTTP/1.1 404 Not Found
Date: Mon, 13 Mar 2023 13:57:07 GMT
Server: Apache
Last-Modified: Sun, 02 Oct 2022 11:50:33 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4677
Keep-Alive: timeout=5, max=72
Connection: Keep-Alive
Content-Type: text/html
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2573307db8caef0a070ba3ebd4f61e2e
28e8cb63280e9b5e4184017cb22aa5f197007450
87e4699d8ded9c722f137c21826dfe419beb8675f226b91081342c90838cb818
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87E4699D8DED9C722F137C21826DFE419BEB8675F226B91081342C90838CB818"
Last-Modified: Sat, 11 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15702
Expires: Mon, 13 Mar 2023 18:18:50 GMT
Date: Mon, 13 Mar 2023 13:57:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2573307db8caef0a070ba3ebd4f61e2e
28e8cb63280e9b5e4184017cb22aa5f197007450
87e4699d8ded9c722f137c21826dfe419beb8675f226b91081342c90838cb818
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87E4699D8DED9C722F137C21826DFE419BEB8675F226B91081342C90838CB818"
Last-Modified: Sat, 11 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15702
Expires: Mon, 13 Mar 2023 18:18:50 GMT
Date: Mon, 13 Mar 2023 13:57:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2573307db8caef0a070ba3ebd4f61e2e
28e8cb63280e9b5e4184017cb22aa5f197007450
87e4699d8ded9c722f137c21826dfe419beb8675f226b91081342c90838cb818
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87E4699D8DED9C722F137C21826DFE419BEB8675F226B91081342C90838CB818"
Last-Modified: Sat, 11 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15702
Expires: Mon, 13 Mar 2023 18:18:50 GMT
Date: Mon, 13 Mar 2023 13:57:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bf0ac20-16ad-460d-8fcb-a873994d420a.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bf0ac20-16ad-460d-8fcb-a873994d420a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bbfef97312a1bc4792615717a63a48ba
1008882db3829f830b0f58c9c5b09792e844a31b
2b096364b450b4845252b7a22a9f9aadadf220e7a6a4134558647d308529d2a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2bf0ac20-16ad-460d-8fcb-a873994d420a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5853
x-amzn-requestid: c8b1593f-4bd9-452d-a904-87b58194d599
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Br_WlHEwoAMFyqw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640e45c3-461a986e5a5544cf574899e4;Sampled=0
x-amzn-remapped-date: Sun, 12 Mar 2023 21:36:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: C6xTwOtJHWOoB4SIZ7qDzhmjdyRpZtrJEQ4iSWw5SHWVIKSxfirSCw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 12 Mar 2023 21:57:44 GMT
age: 57564
etag: "1008882db3829f830b0f58c9c5b09792e844a31b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0217c8c-9f5f-43b3-9d27-0f8eaac36f26.webp
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0217c8c-9f5f-43b3-9d27-0f8eaac36f26.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26033b42139d27c847cf9881a17e0332
b196fbef36c2a5242abfc5d7115f1efd39499453
028dd1c86eaab6b991ad3dcb7fda21cdcfe8f9b22155c6bcb9363fbe379096ec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0217c8c-9f5f-43b3-9d27-0f8eaac36f26.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4512
x-amzn-requestid: e9ba0dc3-3e1a-4ff5-8d0d-57386ced2fb1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BotIeGZ-IAMFmBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640cf569-1a45fa73148fb01f3822ee29;Sampled=0
x-amzn-remapped-date: Sat, 11 Mar 2023 21:40:57 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Wqeeb_wUrrQ62pbbReffhKWx1NeYL67CGmOFZgV-c5BD-JrbB1ud1g==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 12 Mar 2023 21:42:47 GMT
age: 58461
etag: "b196fbef36c2a5242abfc5d7115f1efd39499453"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36b90d71-38dd-41be-b00f-df70bd5d923d.jpeg
34.120.237.76200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36b90d71-38dd-41be-b00f-df70bd5d923d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2eedbee19ad8b7fe24b5c3cda8d92825
1eaffe902658900d684f44e4c68234075f65cb87
e0c5964a97e0c292958c7ae074d6384bac147d13fb8daf900d2097b46092205c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36b90d71-38dd-41be-b00f-df70bd5d923d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4866
x-amzn-requestid: 2a7e29d8-ec57-4bf1-a0c7-b5aa19ad683c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BmJXdG8boAMF2PA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640bef62-622794ed6602dc090e201412;Sampled=0
x-amzn-remapped-date: Sat, 11 Mar 2023 03:02:58 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: pSNGZrZt1ZT1_3zdzsTwLgwsZ5jtvsCHDNTW8mIHwo4nNxLGuRGVmQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Mar 2023 03:57:06 GMT
age: 36002
etag: "1eaffe902658900d684f44e4c68234075f65cb87"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde56a182-6d55-402d-b240-1fe8746a0a76.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde56a182-6d55-402d-b240-1fe8746a0a76.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 780098f209d535b5c802e280f41c2ed7
6d895fec65f4d11af82d1a417fdec5d2df2a9cd1
5b66b48774c284e271f0e4938e304b98e8e3642c9e479768b64fe4186055e886
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde56a182-6d55-402d-b240-1fe8746a0a76.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4743
x-amzn-requestid: 307f30a9-ba32-4ff5-a987-990d05f07b64
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BpjcvEHvIAMFR-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640d4c51-3f20ae277aa76e175a7a3c44;Sampled=0
x-amzn-remapped-date: Sun, 12 Mar 2023 03:51:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: gVYwfArTGE1PoLnLX7VI3aaaqbu5yA8hcn2MdtqWl3IpZF8U5r-Qwg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 d15b6a95f7c8298444f59a99d8027cec.cloudfront.net (CloudFront), 1.1 google
date: Mon, 13 Mar 2023 04:18:22 GMT
age: 34726
etag: "6d895fec65f4d11af82d1a417fdec5d2df2a9cd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4985a20c-c5c5-46f5-87f2-600b40b9691d.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4985a20c-c5c5-46f5-87f2-600b40b9691d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 193459785f7b9edc4c0407e12d61670d
69158749f88794aa299b565ff56478652adb34b9
22fc0bc65444635237b1d616240526823193e94a6ad567985c5db416deb315ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4985a20c-c5c5-46f5-87f2-600b40b9691d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6857
x-amzn-requestid: abeb0887-c368-4222-998f-5509c4e2b8ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BezeuEHmIAMFkqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6408ff91-6650e7e10a8691ad059e5731;Sampled=0
x-amzn-remapped-date: Wed, 08 Mar 2023 21:35:13 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: tUcV1HYLo0swU7Ekd4Ede__3ho0WqhyryMCjdL_plKaEM-MlnGU6Vw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 bb763d35677c62f9f5d9728bba884662.cloudfront.net (CloudFront), 1.1 google
date: Sun, 12 Mar 2023 22:02:04 GMT
age: 57304
etag: "69158749f88794aa299b565ff56478652adb34b9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d465bda-e8f7-498a-8b8e-9fd8f5a4e863.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d465bda-e8f7-498a-8b8e-9fd8f5a4e863.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc6b9225b635519ff0e90400781c6676
e576ab2c5b08780162d104a060c873f52b221538
6dfe0bff6f08723604b2e4805b53dbc1907a8e6f7f56b06c110fbb8f344034d6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d465bda-e8f7-498a-8b8e-9fd8f5a4e863.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10872
x-amzn-requestid: b4f88a88-7ae0-4419-a9d6-a985c7951cc0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BezvPGRBoAMFmdw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6408fffa-00f0efac63f09f3d5662adbf;Sampled=0
x-amzn-remapped-date: Wed, 08 Mar 2023 21:36:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: LWbpNE2xPWrYvBLtEuqnjxXclPKn_-sL1V_cyM5IdU3yqi1moDxBVA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3b5bb90516201e5ddd137696b7b0f50.cloudfront.net (CloudFront), 1.1 google
date: Sun, 12 Mar 2023 22:16:08 GMT
etag: "e576ab2c5b08780162d104a060c873f52b221538"
content-type: image/jpeg
age: 56460
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn1.onlineaccess1.com/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/images/logos/logo_large-8a3a7bfb59df85fdc6225939203c1b41.png
192.0.63.252200 OK 0 B URL HTTP/2 cdn1.onlineaccess1.com/cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/images/logos/logo_large-8a3a7bfb59df85fdc6225939203c1b41.png
IP 192.0.63.252:0
GET /cdn/depot/5093/3120/d802bcf76b94ac2007c23bd171977751/assets/images/logos/logo_large-8a3a7bfb59df85fdc6225939203c1b41.png HTTP/1.1
Host: cdn1.onlineaccess1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://starlightegypt.com/
Cookie: __cflb=02DiuDJZwTATiSnybBeVDKjTCUZYfphxFqCTrzuMh29UU
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 13 Mar 2023 13:57:07 GMT
content-type: image/png
last-modified: Wed, 24 Aug 2022 16:05:01 GMT
vary: Accept-Encoding
etag: W/"63064c2d-c41"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
timing-allow-origin: *
access-control-allow-headers: *
cf-cache-status: HIT
age: 25
strict-transport-security: max-age=15552000; includeSubDomains; preload
set-cookie: __cfruid=abfd13e12b01a71091d212c467bf12f8e1c6a46a-1678715827; path=/; domain=.onlineaccess1.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7a74c8bf2fa21c16-OSL
X-Firefox-Spdy: h2