r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eb76c0b3adf4098ad8a9d1e38250758f
99610ddb2b4ec6d04250ac244f966951695d4f00
01ed8c191c175471aee23cbc196d558e5bf5209f166806fc97db08eb06544bab
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01ED8C191C175471AEE23CBC196D558E5BF5209F166806FC97DB08EB06544BAB"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2421
Expires: Sun, 20 Nov 2022 04:30:12 GMT
Date: Sun, 20 Nov 2022 03:49:51 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f732c50f6a2482aeea20552e0370c2d0
6f33119d5c38e92a0a62f3a46766ff86014e4d68
a47e38c199c5fecd5594544a3889e1cfca5547d85f19056f06eaeeadf17f4fe9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3975
Cache-Control: max-age=114457
Content-Type: application/ocsp-response
Date: Sun, 20 Nov 2022 03:49:51 GMT
Etag: "6378b071-1d7"
Expires: Mon, 21 Nov 2022 11:37:28 GMT
Last-Modified: Sat, 19 Nov 2022 10:31:13 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 20 Nov 2022 03:44:58 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 293
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e7724a1f27dc1b5b2fb63c7e486f74db
ef0ea648ce8bc189d31382baec4b181c724af93b
2a46916079563d95fa6a695104ebf41829ee95a156d6e4d45b9aef7231a8a80e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A46916079563D95FA6A695104EBF41829EE95A156D6E4D45B9AEF7231A8A80E"
Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2782
Expires: Sun, 20 Nov 2022 04:36:13 GMT
Date: Sun, 20 Nov 2022 03:49:51 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Rug3grq7p/ocoBDDUZWyhrFBMhqRmhg2srqoREOFv5trhF15OH4K+0b0U4Uzpz1Ej/9QAeEjy28=
x-amz-request-id: FWCG1FWX7YDVV842
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 20 Nov 2022 03:41:33 GMT
age: 498
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 20 Nov 2022 03:49:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash b86c460f3603abe4a006cd6f9af42769
3c2460f01470a1071dc6eff3797f318d8c73fe86
2ea6ca7a51728f5b2af009a7fe346bd3f9a886a52d248010305b8701c18b5878
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 12:47:07 GMT
Expires: Sat, 26 Nov 2022 12:47:06 GMT
Etag: "3c2460f01470a1071dc6eff3797f318d8c73fe86"
Cache-Control: max-age=550034,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76ce37d38be2b506-OSL
evenium-site.com/site/akquise-event-koln;jsessionid=SnUD6zxsrdydO9KdbfYQcgdn.gl3
302 Moved Temporarily 20 B URL HTTP/1.1 evenium-site.com/site/akquise-event-koln;jsessionid=SnUD6zxsrdydO9KdbfYQcgdn.gl3
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
Analyzer Verdict Alert quad9 Sinkholed
GET /site/akquise-event-koln;jsessionid=SnUD6zxsrdydO9KdbfYQcgdn.gl3 HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Moved Temporarily
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Expires: -1
Pragma: no-cache
Cache-Control: no-cache
Location: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Vary: User-Agent,Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/html;charset=UTF-8
evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
200 OK 3.0 kB URL HTTP/1.1 evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash d3d5be3d4974ee622b185d3163b8ea19
55704ef1ffa47d34e430be072786bf173f941e4d
b331894c76615da980d99a3a2ec2ffbef29c021eef5f9352ee8bee3b9b1d9219
Analyzer Verdict Alert quad9 Sinkholed
GET /site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3 HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Pragma: no-cache
Cache-Control: no-cache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html;charset=UTF-8
evenium-site.com/pro/javascript/evenium_basics.js
200 OK 8.4 kB URL HTTP/1.1 evenium-site.com/pro/javascript/evenium_basics.js
IP
Hash 8e4049022c95d124411381a07ac6b3d2
ce2f18903088559fc46aa0a3847ae67046e9adea
7c3495fe589892091786154ee1919a01a7fe964463c33bc24da0a28f6eb2e1c4
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/evenium_basics.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 8412
Keep-Alive: timeout=15, max=198
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/check_functions.js
200 OK 5.1 kB URL HTTP/1.1 evenium-site.com/pro/javascript/check_functions.js
IP
Hash a4da4ddbd364ea34779a038c405a02b7
b93b894d971f0788f276edc1b125393d9c76db14
0a154dc95b9d19f8ba932ce1cc4e00b5012cd8a7ac04bd97a4c0a8a7ad946dcd
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/check_functions.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 5129
Keep-Alive: timeout=15, max=197
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/ng/js/amdLoader/require.2.0.6.js
200 OK 6.0 kB URL HTTP/1.1 evenium-site.com/ng/js/amdLoader/require.2.0.6.js
IP
File type ASCII text, with very long lines (534)
Hash 36fde233166aeaacdb10ebcad3dd8b1c
22962c41b49cf4fd898fd02dbcb10c6203d08eac
ce5d9f955d0566722bcd07022ded1c9d7b14f98af8dbd997e03a20e5374ad319
Analyzer Verdict Alert quad9 Sinkholed
GET /ng/js/amdLoader/require.2.0.6.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 16 Nov 2022 15:02:24 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 5965
Keep-Alive: timeout=15, max=196
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/i18n/js_bundle.js
200 OK 936 B URL HTTP/1.1 evenium-site.com/pro/javascript/i18n/js_bundle.js
IP
Hash 028c3db6c4b9951485f26c1895ce6cf6
d655b72daebb6ea6bd2b3e3bfb84267f13c69dcc
dc596aecd30e926923c1cbcb873f1dd7cf9f9c1422d4749d1381a58a2da3b682
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/i18n/js_bundle.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 936
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/i18n/js_bundle_de.js
200 OK 1.0 kB URL HTTP/1.1 evenium-site.com/pro/javascript/i18n/js_bundle_de.js
IP
File type Unicode text, UTF-8 (with BOM) text
Hash dc7e85a07fc1121cca6562626770e852
f3a8d723df5f9e4f4b72df22cdc73ff80b966aec
2e1debf48200da10c6361668ce0c16172dae53b178d17b43d61a2ed3cb5f3f49
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/i18n/js_bundle_de.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:48 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 1033
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/survey_factory.js
200 OK 8.5 kB URL HTTP/1.1 evenium-site.com/pro/javascript/survey_factory.js
IP
Hash 4197665d83361f1f952255985015f1f5
40dfd949ec36a75b639049862da1bed3124877d7
2645134d35718e6363ac5d2ab2f2d0f532e62e4e00c3222edd7b091874d5b973
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/survey_factory.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 8475
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/ng/js/modules/require-config.js
200 OK 1.2 kB URL HTTP/1.1 evenium-site.com/ng/js/modules/require-config.js
IP
Hash c8c5df07ca9333676f12f78c72fc05f4
9b5616f452b957bebca59bdecfffeae15c610c80
1ef626162b97bb8a6ecf09b8db3d927a16c076c6764589d2244b11bc5d352c46
Analyzer Verdict Alert quad9 Sinkholed
GET /ng/js/modules/require-config.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 16 Nov 2022 15:02:24 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 1150
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/graphics/survey/website-common.css
200 OK 381 B URL HTTP/1.1 evenium-site.com/pro/graphics/survey/website-common.css
IP
Hash f38adb8f51ab10ee068a21ddb706d115
888d8952a83d8b8853f29659978db41a719f770a
7f12bc993c394c66f56d5493c2bea5d2fe414313e78561dc55e7026f67d6e850
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/graphics/survey/website-common.css HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 381
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
evenium-site.com/pro/javascript/jquery-ui/css/smoothness/jquery-ui.min.css
200 OK 5.3 kB URL HTTP/1.1 evenium-site.com/pro/javascript/jquery-ui/css/smoothness/jquery-ui.min.css
IP
File type ASCII text, with very long lines (25177)
Hash 8254f83da6a32ac8b57f1e18da4b1bd6
6ad0e22a1c2619b1de66dc70d246e640e5554ade
2e69c94252dc7a0083cb5f6b0c1fad2b05d7233806f48ce3c8ca96874ebf9463
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/jquery-ui/css/smoothness/jquery-ui.min.css HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 5314
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
evenium-site.com/pro/graphics/themes/default/layouts/custom/css/layout.css
200 OK 1.5 kB URL HTTP/1.1 evenium-site.com/pro/graphics/themes/default/layouts/custom/css/layout.css
IP
File type assembler source, ASCII text
Hash 95fa6139be808927b12c5e798db151cf
b9d7cf5e341bbf309da63c473202c8f7705744b7
0cd273389ba2742d1e8054933b947dfd84fe5e596f24ff3d7efa314440a19884
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/graphics/themes/default/layouts/custom/css/layout.css HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 1524
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 20 Nov 2022 03:25:03 GMT
cache-control: public,max-age=3600
age: 1488
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
evenium-site.com/pro/graphics/survey/facility-default.css
200 OK 5.1 kB URL HTTP/1.1 evenium-site.com/pro/graphics/survey/facility-default.css
IP
Hash 81b523c79b1ad1456a1cc544c8fef4d4
3844e569ff6441afbdacd3feaeb89c3e5683cf10
29123dd32e61aaf0782961552375b16f4e49700f884be8ba1ba7bfc8053546f4
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/graphics/survey/facility-default.css HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 5054
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
evenium-site.com/ng/layout/base/js/tooltip.js
200 OK 401 B URL HTTP/1.1 evenium-site.com/ng/layout/base/js/tooltip.js
IP
Hash e43d0d6724e2052b222aba1d164bbc74
c2f75d7a0b998f2459edbeb2a0be7890c3467c65
a68f84657d574d1484e2c440a704d4a13583ad1e495efdba4a50e0a5070a878b
Analyzer Verdict Alert quad9 Sinkholed
GET /ng/layout/base/js/tooltip.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 16 Nov 2022 15:02:26 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 401
Keep-Alive: timeout=15, max=198
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/menus/pop_events.js
200 OK 1.7 kB URL HTTP/1.1 evenium-site.com/pro/javascript/menus/pop_events.js
IP
Hash f7782a9ef9226507900f0b5ed01bd0cd
3155d1d585bea1ac8aac50a504e4ceef43fc9e55
4d52b50e4f841de1938cebd9faba91278b87a7630cbdec04e68171ce9e3cbb83
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/menus/pop_events.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 1697
Keep-Alive: timeout=15, max=198
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/survey_utils.js
200 OK 1.7 kB URL HTTP/1.1 evenium-site.com/pro/javascript/survey_utils.js
IP
File type HTML document, ASCII text
Hash b817b0369e359dea5239d9cabec54d76
c650ab15b23502aa133d00749bd05a351fdf9373
914c65d54d63069ec309da145d8eda47bfb6a1e721aa5b4e056e3496a64f2a42
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/survey_utils.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 1677
Keep-Alive: timeout=15, max=198
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/jquery.min.js
200 OK 33 kB URL HTTP/1.1 evenium-site.com/pro/javascript/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32769)
Hash fa22e9408feea926523453b20b431575
db6f2a7696f16cb204ef7529382afa29e4e9d27e
9bc2a28111e1c5f5229d0ac66715838426bf1ef6132405d89d2f1e6dc2ea8c21
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/jquery.min.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 33132
Keep-Alive: timeout=15, max=200
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
evenium-site.com/pro/javascript/jquery-ui/js/jquery-ui.min.js
200 OK 60 kB URL HTTP/1.1 evenium-site.com/pro/javascript/jquery-ui/js/jquery-ui.min.js
IP
File type ASCII text, with very long lines (64560)
Hash 5822c2c307d5e9e88359ad54fa831f57
a687df42167589135d6f122aa7ca8d31572f352b
d17c4558181ac118d73eca980861590a4affa3060a1c7f5f18bbcd6bf3260a8e
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/javascript/jquery-ui/js/jquery-ui.min.js HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=21600, public
Content-Length: 60467
Keep-Alive: timeout=15, max=195
Connection: Keep-Alive
Content-Type: text/javascript; charset=utf-8
ocsp.digicert.com/
200 OK 471 B IP
Hash 060d538b33e370fcd033339830d33a42
4a37d427988358eb318e18e2678c3484ef4a5ebd
efa33f92547243814b5bd3bca4f94d26055d590a4431611b3ba251a8d774bfbb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6039
Cache-Control: max-age=111460
Content-Type: application/ocsp-response
Date: Sun, 20 Nov 2022 03:49:51 GMT
Etag: "63789cac-1d7"
Expires: Mon, 21 Nov 2022 10:47:31 GMT
Last-Modified: Sat, 19 Nov 2022 09:06:52 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
evenium-site.com/pro/graphics/gp_zic/zicon/iconclose.png
200 OK 905 B URL HTTP/1.1 evenium-site.com/pro/graphics/gp_zic/zicon/iconclose.png
IP
File type PNG image data, 26 x 26, 8-bit colormap, non-interlaced\012- data
Hash a8acf2c88f6ed8cb2cf528ebc6dccdf9
15a7210af6c6c8b72a4cf89286ef9ba031191f01
9f6467f1ae549b6318a1104343af2b60d109e09715723e1045d5987ffd5e3506
Analyzer Verdict Alert quad9 Sinkholed
GET /pro/graphics/gp_zic/zicon/iconclose.png HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:42 GMT
Accept-Ranges: bytes
Content-Length: 905
Cache-Control: max-age=604800, public
Vary: User-Agent
Keep-Alive: timeout=15, max=197
Connection: Keep-Alive
Content-Type: image/png
evenium-site.com/uploads/event_member/169636/IhreAnmeldung2.png
200 OK 32 kB URL HTTP/1.1 evenium-site.com/uploads/event_member/169636/IhreAnmeldung2.png
IP
File type PNG image data, 797 x 292, 8-bit/color RGBA, non-interlaced\012- data
Hash 1fb5678223bb701db4bd4a0ed2082c26
684149f29d561e5fee8e31bf4d38581b3ca528d3
02229b6b4ace18b563c9f327cc58bb1916d65833107e73d0f7ea80cd175da8d4
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/event_member/169636/IhreAnmeldung2.png HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 20 Jul 2022 12:21:16 GMT
Accept-Ranges: bytes
Content-Length: 32039
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, PUT, DELETE, GET, OPTIONS
Access-Control-Allow-Headers: Content-Type, X-Evenium-Application, X-Evenium-Application-Version
X-Robots-Tag: noindex, noarchive
Cache-Control: max-age=604800, public
Vary: User-Agent
Keep-Alive: timeout=15, max=197
Connection: Keep-Alive
Content-Type: image/png
evenium-site.com/uploads/event_member/152287/background/bodyBackground-20191211-105540.png
200 OK 48 kB URL HTTP/1.1 evenium-site.com/uploads/event_member/152287/background/bodyBackground-20191211-105540.png
IP
File type PNG image data, 1023 x 3071, 8-bit/color RGBA, non-interlaced\012- data
Hash ad932bfeb1215b5d7294d51f4febd520
b507d070b95a8f6cd4e9e3d0abc6b43a9259f7de
5fdc36486834fba011cefe3baf1154d87f45eea3bdf6ce382ff95475f90958cd
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/event_member/152287/background/bodyBackground-20191211-105540.png HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:52 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 11 Dec 2019 09:55:40 GMT
Accept-Ranges: bytes
Content-Length: 47877
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, PUT, DELETE, GET, OPTIONS
Access-Control-Allow-Headers: Content-Type, X-Evenium-Application, X-Evenium-Application-Version
X-Robots-Tag: noindex, noarchive
Cache-Control: max-age=604800, public
Vary: User-Agent
Keep-Alive: timeout=15, max=194
Connection: Keep-Alive
Content-Type: image/png
evenium-site.com/uploads/event_member/168522/Header_Titelbild2.png
200 OK 555 kB URL HTTP/1.1 evenium-site.com/uploads/event_member/168522/Header_Titelbild2.png
IP
File type PNG image data, 798 x 341, 8-bit/color RGBA, non-interlaced\012- data
Size 555 kB (554625 bytes)
Hash ca2e1fc25ab989334e26d426c8ff187b
4f4959c3ca8f8687b2c4983e40e4649510ec79be
c33cd8124fe552c313195e79a6af8f9057fbf0a2aa3c6d595cb2db414d78bb68
Analyzer Verdict Alert quad9 Sinkholed
GET /uploads/event_member/168522/Header_Titelbild2.png HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:51 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 30 May 2022 11:33:21 GMT
Accept-Ranges: bytes
Content-Length: 554625
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, PUT, DELETE, GET, OPTIONS
Access-Control-Allow-Headers: Content-Type, X-Evenium-Application, X-Evenium-Application-Version
X-Robots-Tag: noindex, noarchive
Cache-Control: max-age=604800, public
Vary: User-Agent
Keep-Alive: timeout=15, max=199
Connection: Keep-Alive
Content-Type: image/png
evenium-site.com/favicon.ico
200 OK 4.3 kB URL HTTP/1.1 evenium-site.com/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Hash f12d4b1f0059131724cd8d5548090957
5f312a424e1d2fa224dd40d819fed06906a4a169
ad22fc310edf6c19f143a47cffe278435e906925e313f31e2fe6cf0630e9d82e
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: evenium-site.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://evenium-site.com/site/akquise-event-koln;jsessionid=x0yE-nHbKU3B16xDkIBNcwmq.gl3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 20 Nov 2022 03:49:52 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; preload
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Last-Modified: Wed, 05 Oct 2022 13:26:36 GMT
Accept-Ranges: bytes
Content-Length: 4286
Cache-Control: max-age=604800, public
Vary: User-Agent
Keep-Alive: timeout=15, max=193
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ODwznW8SDfgx/4iITiWd7w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nnR1XKQKGdX6XqWPyhQ0mf2TXNs=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 798ef0955be535268547903e74dacfcd
782823486f9ded693609cade264d1950e816f7d0
75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4676
Expires: Sun, 20 Nov 2022 05:07:49 GMT
Date: Sun, 20 Nov 2022 03:49:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 798ef0955be535268547903e74dacfcd
782823486f9ded693609cade264d1950e816f7d0
75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4676
Expires: Sun, 20 Nov 2022 05:07:49 GMT
Date: Sun, 20 Nov 2022 03:49:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 798ef0955be535268547903e74dacfcd
782823486f9ded693609cade264d1950e816f7d0
75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4676
Expires: Sun, 20 Nov 2022 05:07:49 GMT
Date: Sun, 20 Nov 2022 03:49:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 798ef0955be535268547903e74dacfcd
782823486f9ded693609cade264d1950e816f7d0
75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95"
Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4676
Expires: Sun, 20 Nov 2022 05:07:49 GMT
Date: Sun, 20 Nov 2022 03:49:53 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1fe6564-e0ba-4c81-b868-04fa596cddaa.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1fe6564-e0ba-4c81-b868-04fa596cddaa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a8f1dddf91a53f8f28d70565d1a3458b
9d026c2c53629648cfda4a324eadae6e33de0d55
c352216d126382d7b588ff6e5a3ed6ab12d92dc5e58216cc5883c27bf612a7d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1fe6564-e0ba-4c81-b868-04fa596cddaa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7968
x-amzn-requestid: 0dc9cfbf-7e72-45a7-9496-49a5cf1a4465
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3jZmEwboAMF1tQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794c3d-1f40770e29ad853b31a3aa23;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:35:57 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UM4MVSwb8F1uv2jbbdeh8bhV3KJNhqiN9wJj1Yua8h4x762uD8UKyQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 21:41:31 GMT
age: 22102
etag: "9d026c2c53629648cfda4a324eadae6e33de0d55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ec00dd4-9302-4378-82e1-eb2f8686bdc7.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ec00dd4-9302-4378-82e1-eb2f8686bdc7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6653147acce57a88af20de89d4f40239
d097755b7cafd14d6dcf18fe09d0a3237a1057dd
5d0166eacfa748026865e4461b1a1c0fb7373e0fb7de16b266f3eee6b816f5f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ec00dd4-9302-4378-82e1-eb2f8686bdc7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13671
x-amzn-requestid: 26e11776-b559-4325-9082-df4b9366715e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3jWaFEZoAMFb3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794c28-0117d3a633ab918d6179fa87;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:35:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: IwyX_NEXHb8YvHaYou8CndLh9PR-S7OR-M6hiKNCLXuSB218dIMlfA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 21:38:45 GMT
age: 22268
etag: "d097755b7cafd14d6dcf18fe09d0a3237a1057dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F175348d8-bd72-46a1-a737-9e442ab4231c.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F175348d8-bd72-46a1-a737-9e442ab4231c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a41f9693b9247dcce6c2340bb5c02828
e982a3a8a8c6baac9d1676ad93646d6c4cd9f58e
aa23cead1d44bf9db22654eb14113ef356d4ac972d301969c02803964418d556
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F175348d8-bd72-46a1-a737-9e442ab4231c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9798
x-amzn-requestid: abab4eb2-0a35-4113-8a52-e07c08f069cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bkiY2HXCoAMFVrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371b105-1cb176423ca3231a093cc4c7;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 03:07:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sCEwyGN6h_P0abZJGEY8PJNE7j1Nmz62-wvzWWO5gbFwA1auACXtJw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 15:08:05 GMT
age: 45708
etag: "e982a3a8a8c6baac9d1676ad93646d6c4cd9f58e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b07f2a3-725f-4aa2-afa2-375328b55ea8.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b07f2a3-725f-4aa2-afa2-375328b55ea8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4454f87c40e9b7c5de9853c1ec6f0671
119aac07a88e7c358bf353335f3a81039ca9943b
e909f823611609282c643c58ccc7b267dcfc09970e58b66742dc8baf7cda5bf4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b07f2a3-725f-4aa2-afa2-375328b55ea8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5699
x-amzn-requestid: ea538aed-2b5a-4940-b49f-b4703a556956
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3i6KHnQoAMFu3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794b74-2f756f9a27ddc4b001cdaff2;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:32:36 GMT
x-amz-cf-pop: SEA19-C3, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: w4JqPNmzHlUl4EMM2osU4Z5dtroFWOB0DL5ylePs6XBbIdxpsPItnQ==
via: 1.1 219e8f088c8c2a564bdacafe44be620a.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 21:41:31 GMT
etag: "119aac07a88e7c358bf353335f3a81039ca9943b"
content-type: image/jpeg
age: 22102
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb73669f-154c-41e7-aadd-11587277938d.webp
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb73669f-154c-41e7-aadd-11587277938d.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5447e0a57fbd65d5f719786842dfb40
68dbd2b4ecedb47d3f47bc3690336fe0f3fd3fe6
b6f69c679ecb9978c12f9fc5e03531250e1e13327ac0337532317b91d2ede502
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb73669f-154c-41e7-aadd-11587277938d.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10330
x-amzn-requestid: c6df2fa3-53ad-4f43-ab26-8754ce25c421
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b3jdVGY0oAMF_2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63794c55-0dd776a50b4a8fbb5b29ccae;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 21:36:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: sKTa_b92EIi4H8YgHoEJCm8rVgdfCFJ91I1UNkGLzsPQVOI10I9d7w==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 19 Nov 2022 21:45:57 GMT
age: 21836
etag: "68dbd2b4ecedb47d3f47bc3690336fe0f3fd3fe6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 481c033b9ffd030ff0de6e35cf788b47
85d3baad9217af2b5d75c019d2ef95dbb919a788
02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bubSsHbZoAMFZNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: s1153EpshSWYGLcN7Zzzs4PgXl9cddZ20gTwh5bK2HOBu4e_PSNCpQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sun, 20 Nov 2022 03:43:56 GMT
age: 357
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
195.154.238.177
93.184.220.29
34.120.237.76
23.36.76.226
104.18.32.68