eid.surveyprogramm.com/c/b7ea57d7e03bcec0
200 OK 2.4 kB URL HTTP/1.1 eid.surveyprogramm.com/c/b7ea57d7e03bcec0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1141)
Hash a275244eb827a03d8f55ccf0d32c8d11
f874c15ba08d0c906fbac098900e92718484d37e
084cb4407949b4dd754afbc28f1409d5a12a27d5e931428bba92cd0a829a8075
GET /c/b7ea57d7e03bcec0 HTTP/1.1
Host: eid.surveyprogramm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 01 Feb 2023 23:01:34 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: unique_id=63daef4e00032be3; Path=/; Expires=Sun, 02 Apr 2023 23:01:34 GMT
unique_id2=63daef4e0003320e; Path=/; Expires=Tue, 02 May 2023 23:01:34 GMT
impression=; Path=/; Expires=Wed, 01 Feb 2023 23:01:34 GMT
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7e05c8461bd2dc5a149f71e2c465ea29
705983959c887e243cb55a8a1796757b579ee977
4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2169
Expires: Wed, 01 Feb 2023 23:37:43 GMT
Date: Wed, 01 Feb 2023 23:01:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4186
Expires: Thu, 02 Feb 2023 00:11:20 GMT
Date: Wed, 01 Feb 2023 23:01:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17893
Expires: Thu, 02 Feb 2023 03:59:47 GMT
Date: Wed, 01 Feb 2023 23:01:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 22:36:02 GMT
content-type: application/json
age: 1532
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: gfYBtcFQ+bFatOdYiuZTb+r05TpfA6J6a5dUlLQg6J9ale/0imlA6u2JMDr3P4o4MQ9tWSSyI4c=
x-amz-request-id: N6JVJ8WXX3YVXXY4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 22:51:44 GMT
age: 590
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 23:01:34 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 946c9522a1339ff219f1667c25bccc51
ed2ed266180e1d507b72e4ff47d29c510d22e28c
e6284616f45a96ee2cb5e7074ba9a3daa43449381bd6d41247d7851415e20ea2
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 23:01:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sun, 05 Feb 2023 20:49:33 GMT
ETag: "ed2ed266180e1d507b72e4ff47d29c510d22e28c"
Last-Modified: Wed, 01 Feb 2023 20:49:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792e4f4e3f80b51e-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30af7e4e1b4fc250f818a85feaf9fad8
1466200fc9c0d7e21b2e46f6815c1d427cbda3a3
f085b88e73dc7f5c02e30e66e4e5774e72628098f89923736de0f78d9f3c69b7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F085B88E73DC7F5C02E30E66E4E5774E72628098F89923736DE0F78D9F3C69B7"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14326
Expires: Thu, 02 Feb 2023 03:00:21 GMT
Date: Wed, 01 Feb 2023 23:01:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 22:41:43 GMT
age: 1192
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/277525/1670588856/css/halloween.css?1670588856
200 OK 1.3 kB URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/css/halloween.css?1670588856
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash 12370513665ace2e9153649d2465a1ee
eaa22bcedc4bdb8db24a0af9ebc600049731c86e
9499e9ee7aa06e2667e1500995b47edccc141d61fe9a1c0f5effcf0fbe631594
GET /landings/277525/1670588856/css/halloween.css?1670588856 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: QFu8QZ1X0yneeCCbMaQDaLXHHJe6y90obrm1+TWL+csWLwDMnnvRHVZgEL0jsnepD3gvAlFqizM=
x-amz-request-id: WK9V96X4YPBS9EFF
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "12afa215a144faf624503548e14c14a7"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 01 Feb 2023 23:01:35 GMT
Content-Length: 1252
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277525/1670588856/js/second_back_multi_bigo.js?1670588856
200 OK 811 B URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/js/second_back_multi_bigo.js?1670588856
IP
ASN #20940 Akamai International B.V.
File type HTML document, ASCII text
Hash 8962886bfc61190934e58c8f3b7c78ad
e1a64d9d0426656c1eb1dc6066391b2c59c4bdf6
53b3fb8e8096eb619e026551ea32b323b5f9880c472ea714bc9d33d7fbc5b7a5
GET /landings/277525/1670588856/js/second_back_multi_bigo.js?1670588856 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: woC3ZWcIwmPNkGuNSud1o564Jv2pV2CrTLBf6KdfUtEE7I1bC0AQCnpwCFFEcn/S9954TG4p4Ck=
x-amz-request-id: WK9ND0C1XD8Z49RD
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "3485de02d778701751e6bd8474982013"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 01 Feb 2023 23:01:35 GMT
Content-Length: 811
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277525/1670588856/js/script.js?1670588856
200 OK 870 B URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/js/script.js?1670588856
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash 1f49ae7827a9bf81d2c8b1f964f02763
78bc9b08dc167c578590452646a08b41b4a058b0
7aceecb2f30fd3e97f8d2729e0dd65515e7da77f1087e315730cc452c4dac3c8
GET /landings/277525/1670588856/js/script.js?1670588856 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: SJ+fJtemgRQI/p4Ap5fyX4g1YXO3j5ZlfvCS5VrC+VEODXs88Xb0xo2rLSe4eR94m8GnNHhLMNY=
x-amz-request-id: WK9XD5X6SRHSXNNF
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "bd11908ecd004e7cfc61e57616617d8a"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 01 Feb 2023 23:01:35 GMT
Content-Length: 870
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
api.imotech.video/ad/events.js?pixel_id=902760083831232256
200 OK 6.1 kB URL HTTP/2 api.imotech.video/ad/events.js?pixel_id=902760083831232256
IP
File type Unicode text, UTF-8 text, with very long lines (17299), with no line terminators
Hash 04e28f6f27e56120dbd628602d454aa8
bd60441a6df5ff0d634a18081fd958c08cea8d4e
2cc39d592792855eb5562cff1fc480c32634d9e7af315afcca0d983d8f0927ed
GET /ad/events.js?pixel_id=902760083831232256 HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.13.6.1
date: Wed, 01 Feb 2023 23:01:35 GMT
content-type: application/json,application/javascript;charset=utf-8
content-length: 6084
access-control-allow-origin: *
content-encoding: gzip
cache-control: private, max-age=900
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/277525/1670588856/css/animations.css?1670588856
200 OK 998 B URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/css/animations.css?1670588856
IP
ASN #20940 Akamai International B.V.
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash 04b5329ac0be1ac6d1745fbe39b7c8ac
ebcb44d0a10cf28eb74ebc3553c467cdac5d8fa2
37dd255f2a0250349804e9242730de0990126463258d5d4b747b38e3f9f4097a
GET /landings/277525/1670588856/css/animations.css?1670588856 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 6mPMIFyR6tPMEUqm18W18Bql+iY2wdc2V1kbACQk2QanrKK3tb8pYJbbD05lAENYHJRbsqh+mGo=
x-amz-request-id: WK9VK6X1ZP4MTCJ7
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "68578c1c851a57c5e8ac8a0de94ab75e"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 01 Feb 2023 23:01:35 GMT
Content-Length: 998
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277525/1670588856/css/style.css?1670588856
200 OK 1.5 kB URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/css/style.css?1670588856
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with CRLF line terminators
Hash 2eb3c2060d382941446129d4c955e4f8
1d73f346d05b0431b9befbe1a4b6d7abcdd30d26
5021bfd5fb3771fbaab5bffe5e857ebf19317836396cec27023ee696f16db69d
GET /landings/277525/1670588856/css/style.css?1670588856 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Z7MsV8ZARQRJYxvXKOpUL5E7ZUbUukS6w7D6YFZDIHChJ9W+LaIpeL1Uoga704vNHAFLSbJKELs=
x-amz-request-id: WK9NGJ1S8JZ0XJZ5
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "cf7373d6f2ec98e6d36632b6fae7b4eb"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Wed, 01 Feb 2023 23:01:35 GMT
Content-Length: 1518
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12618
Expires: Thu, 02 Feb 2023 02:31:53 GMT
Date: Wed, 01 Feb 2023 23:01:35 GMT
Connection: keep-alive
cdn.stfilecamp.com/stormtrk.js?1670588856
200 OK 6.8 kB URL HTTP/2 cdn.stfilecamp.com/stormtrk.js?1670588856
IP
Hash 39e5f8ad757fe438c784e8d883e47ab0
6b2905489485100c83605f43186c5843031e1f3b
e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a
Analyzer Verdict Alert fortinet Phishing
GET /stormtrk.js?1670588856 HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 23:01:35 GMT
cache-control: max-age=3600
content-length: 6807
content-type: text/javascript
last-modified: Sat, 24 Dec 2022 08:48:24 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "39e5f8ad757fe438c784e8d883e47ab0"
x-amz-request-id: tx000000000000001db6b09-0063daef4f-2f20f297-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1675292494.dop232.sk1.t,1675292494.cds251.sk1.hn,1675292495.cds205.sk1.pr
X-Firefox-Spdy: h2
cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1670588856
200 OK 90 kB URL HTTP/1.1 cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1670588856
IP
ASN #14061 DIGITALOCEAN-ASN
File type ASCII text, with very long lines (65447)
Hash 7c14a783dfeb3d238ccd3edd840d82ee
ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b
80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0
Analyzer Verdict Alert quad9 Sinkholed
GET /ajax/libs/jquery/3.6.0/d/jquery.min.js?1670588856 HTTP/1.1
Host: cdnjs.claudflare.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 01 Feb 2023 23:01:35 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 89500
Connection: keep-alive
Cache-Control: public, max-age=43200
Expires: Thu, 02 Feb 2023 11:01:35 GMT
api.imotech.video/ad/pixelfile.html
200 OK 1.9 kB URL HTTP/2 api.imotech.video/ad/pixelfile.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 276e9f07c55ed5404d2b4118da99c454
f3556fab4dbc2f9dc0ed954685e733466a44cae2
906f6effab44b23ce90ce63d03fea117c7a9346983bd27972b37f4085d561869
GET /ad/pixelfile.html HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty/1.13.6.1
date: Wed, 01 Feb 2023 23:01:35 GMT
content-type: application/json,text/html;charset=utf-8
content-length: 1888
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 869870a72058bc664798064bb8e24f56
adade7121fb9db9fe3ec2608febd6c111f4599f4
df8446d21e6f2587ebb2893d29cc4fb8f26192ec7e559d56dc9d1ae7c252e4bd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=115525
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 23:01:35 GMT
Etag: "63da0f94-116"
Expires: Fri, 03 Feb 2023 07:07:00 GMT
Last-Modified: Wed, 01 Feb 2023 07:07:00 GMT
Server: nginx
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 23:01:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/arvo/v14/tDbM2oWUg0MKoZw1-LPK8w.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/arvo/v14/tDbM2oWUg0MKoZw1-LPK8w.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17300, version 1.0\012- data
Hash 4422504365a339cdaaa4a6124e8a00a2
2708a7cc500d8fcc263e8cdf88f37c5f2eff9531
2c43a3f8c9ced2758c2f7cba58401a323439120bc6e985881a1bc01475c468ab
GET /s/arvo/v14/tDbM2oWUg0MKoZw1-LPK8w.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://eid.surveyprogramm.com
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17300
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 23:47:43 GMT
expires: Tue, 30 Jan 2024 23:47:43 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 10 Sep 2020 17:06:30 GMT
content-type: font/woff2
age: 170032
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NsgTMmqghm/cieBTplEOyg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cytzcGPoU1JuUf17NxZAYbwpOyc=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 23:01:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.imotech.video/bigoad/trackingview?it=1675292519167&title=%24500%20Amazon%20Gift%20Card&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0&host=eid.surveyprogramm.com&cookie_id=BA1.1.1822075179.1675292519&session_id=BA1.1.5964879930.1675292519&pixel_id=902760083831232256&ts=1675292519170&extra=%7B%22action%22%3A%22page_view%22%2C%22wst%22%3A204%2C%22drt%22%3A1256%2C%22lgt%22%3A1261%7D
200 OK 104 B URL HTTP/2 api.imotech.video/bigoad/trackingview?it=1675292519167&title=%24500%20Amazon%20Gift%20Card&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0&host=eid.surveyprogramm.com&cookie_id=BA1.1.1822075179.1675292519&session_id=BA1.1.5964879930.1675292519&pixel_id=902760083831232256&ts=1675292519170&extra=%7B%22action%22%3A%22page_view%22%2C%22wst%22%3A204%2C%22drt%22%3A1256%2C%22lgt%22%3A1261%7D
IP
File type ASCII text, with no line terminators
Hash 63e58225a37841f89e385caf84bc1af4
a7dcfc720566fb9a3065d0ea8bccf5a1cbcba511
0460d74e8cfdf2d9251e2da06b8bb7a2bfaa431ff964b6b745e929606066190a
POST /bigoad/trackingview?it=1675292519167&title=%24500%20Amazon%20Gift%20Card&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0&host=eid.surveyprogramm.com&cookie_id=BA1.1.1822075179.1675292519&session_id=BA1.1.5964879930.1675292519&pixel_id=902760083831232256&ts=1675292519170&extra=%7B%22action%22%3A%22page_view%22%2C%22wst%22%3A204%2C%22drt%22%3A1256%2C%22lgt%22%3A1261%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://eid.surveyprogramm.com
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty/1.13.6.1
date: Wed, 01 Feb 2023 23:01:35 GMT
content-type: application/json
content-length: 104
X-Firefox-Spdy: h2
api.imotech.video/bigoad/trackingview?it=1675292519167&title=%24500%20Amazon%20Gift%20Card&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0&host=eid.surveyprogramm.com&cookie_id=BA1.1.1822075179.1675292519&session_id=BA1.1.5964879930.1675292519&pixel_id=902760083831232256&ts=1675292519170&extra=%7B%22action%22%3A%22init%22%2C%22wst%22%3A204%2C%22drt%22%3A1256%2C%22lgt%22%3A1261%7D
200 OK 104 B URL HTTP/2 api.imotech.video/bigoad/trackingview?it=1675292519167&title=%24500%20Amazon%20Gift%20Card&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0&host=eid.surveyprogramm.com&cookie_id=BA1.1.1822075179.1675292519&session_id=BA1.1.5964879930.1675292519&pixel_id=902760083831232256&ts=1675292519170&extra=%7B%22action%22%3A%22init%22%2C%22wst%22%3A204%2C%22drt%22%3A1256%2C%22lgt%22%3A1261%7D
IP
File type ASCII text, with no line terminators
Hash e7e3716c1ee5eb01885906a4d9c63f0a
674c34f4d714e7242f89d9572124515c8e471d02
b299be7f51b2d78d23a0638419e44552e70e2252e4b0891d59dcd6b82be4b254
POST /bigoad/trackingview?it=1675292519167&title=%24500%20Amazon%20Gift%20Card&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0&host=eid.surveyprogramm.com&cookie_id=BA1.1.1822075179.1675292519&session_id=BA1.1.5964879930.1675292519&pixel_id=902760083831232256&ts=1675292519170&extra=%7B%22action%22%3A%22init%22%2C%22wst%22%3A204%2C%22drt%22%3A1256%2C%22lgt%22%3A1261%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://eid.surveyprogramm.com
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty/1.13.6.1
date: Wed, 01 Feb 2023 23:01:35 GMT
content-type: application/json
content-length: 104
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/277525/1670588856/images/gift.png
200 OK 4.3 kB URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/images/gift.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 84 x 84, 8-bit colormap, non-interlaced\012- data
Hash fffce733f6fe691cbd72247e0858079a
6abcf141d1ba377a441ecd25d978d34416486d08
ed0ec5bec53f54f33990790fd15a7c8b9c3ba35bbb3a5d795e336a1e33c83b18
GET /landings/277525/1670588856/images/gift.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: +y4+QqYLJlxzfRLXTjJ0IK4oyBNI+00zPtXlpAjRrWAiDpBZPUsBYn6jxbqB/fc3etoLlbheJFE=
x-amz-request-id: R1P62K90V48MSF9E
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "fffce733f6fe691cbd72247e0858079a"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 4278
Date: Wed, 01 Feb 2023 23:01:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277525/1670588856/images/ico-like2.png
200 OK 220 B URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/images/ico-like2.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 13 x 12, 8-bit colormap, non-interlaced\012- data
Hash e4c6e8dcd575bd5f346565ce8dbacfe7
29e5d4862f0470607f803d462bddf5f14cf57969
9e79a749ac5f41341fdff11f64845580207490915f72b09ec320e0db0fea224a
GET /landings/277525/1670588856/images/ico-like2.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: /BAUH/VnQFN1XitX7AIujBOtSNWNvnKBkxOvfG1gynJnKYcFKhDzdKqZqlOVIoynYzd8pvYrPkk=
x-amz-request-id: R1PEHH0NKNA0M8QJ
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "e4c6e8dcd575bd5f346565ce8dbacfe7"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 220
Date: Wed, 01 Feb 2023 23:01:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277525/1670588856/images/amazon_500.png
200 OK 25 kB URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/images/amazon_500.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 712 x 439, 8-bit/color RGBA, non-interlaced\012- data
Hash a0f6d3b7bd91e202a0a2363726fbcdb7
81222812498858c43e7421ff352fe7e60bebb5e9
d261daa625a5ad6d097041a8716fc2c7b167860eebbc8bad985436c8e683a3d5
GET /landings/277525/1670588856/images/amazon_500.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: u5oDWtJpy2XAV55OajfIpeAoZpWsHUZj4wYGvYaCWpryBkUzabtkUqExLWYLCEciBKBWLpkNeVw=
x-amz-request-id: WK9VND4D9Q7C439W
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "a0f6d3b7bd91e202a0a2363726fbcdb7"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 24875
Date: Wed, 01 Feb 2023 23:01:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277525/1670588856/images/sprites2.jpg
200 OK 20 kB URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/images/sprites2.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 192x192, components 3\012- data
Hash 3d5813d0dc0e03ae25aa9aa60b064fea
970331d3110728e9342127330ecdd7b736acf8f4
3888663dd84f0c638de77d6fb74df9a76b4fbbb059a5d3b3678153663befc1d0
GET /landings/277525/1670588856/images/sprites2.jpg HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/277525/1670588856/css/style.css?1670588856
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
x-amz-id-2: rkwmWsHutJ6Qdv0N0j3TivYCv2CQYi/ByU8fW31cDSkQoemCVI6HZgB3LltpvImhqe/42j0Yknk=
x-amz-request-id: R1PC0YEPWQGVZWEM
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "3d5813d0dc0e03ae25aa9aa60b064fea"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 20068
Date: Wed, 01 Feb 2023 23:01:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277525/1670588856/images/box.png
200 OK 208 kB URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/images/box.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 626 x 626, 8-bit/color RGBA, non-interlaced\012- data
Size 208 kB (207966 bytes)
Hash 73b79bdcf0208337db5f9237f8d396bc
0b6b66a728761ea2518890836d1d112eb3175b8e
b377b9277e5dcd9f1193c922b1a9bd8cf2ca0ade3eb69fe6f86189c7c81572e3
GET /landings/277525/1670588856/images/box.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: lMrOhhnWLme2Dl/35UQmvSy5CHfzjdz3fI7hnyls2y/fJNijDiCYakOIFDvwIsYFmKhvmHzZYws=
x-amz-request-id: R1P2YN4RS5VK4QSM
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "73b79bdcf0208337db5f9237f8d396bc"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 207966
Date: Wed, 01 Feb 2023 23:01:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277525/1670588856/images/box_dark.png
200 OK 207 kB URL HTTP/1.1 cdn-adef.akamaized.net/landings/277525/1670588856/images/box_dark.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 626 x 626, 8-bit/color RGBA, non-interlaced\012- data
Size 207 kB (206597 bytes)
Hash 982197a16444d8f416e8938d4d093e6a
aa1b7d79ecac08cf8b500aa640f5636143ef642c
e475929309d3b03e843b02448eea536d5a5cba56fef4c94f00a0019434feb32d
GET /landings/277525/1670588856/images/box_dark.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dTBtazkr8Mn2uN5UYuFPtm0rG0Pe6cYIZAYcQRLoJIxpEg4NsQ5etOXzgIDvoziUe3qjovqiCDs=
x-amz-request-id: WK9PK05JKSJ2HEBH
Last-Modified: Fri, 09 Dec 2022 12:27:38 GMT
ETag: "982197a16444d8f416e8938d4d093e6a"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 206597
Date: Wed, 01 Feb 2023 23:01:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/images/favicon.ico
200 OK 4.1 kB URL HTTP/1.1 cdn-adef.akamaized.net/images/favicon.ico
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: mzbDFFn0Yhqdz4XL9s4sX6yByljdNVrKhKiK+UtK4DVRgNzfBI6OtL7EakQiGwqEsC19uC++cQI=
x-amz-request-id: 78F19547EBC3B810
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
Date: Wed, 01 Feb 2023 23:01:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn.stfilecamp.com/fp.min.js
200 OK 32 kB URL HTTP/2 cdn.stfilecamp.com/fp.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (31370)
Hash 198f2f5b0a649f41fe890c59d37319aa
f24629687612889bb59f610df3879afcd766fb80
d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912
Analyzer Verdict Alert fortinet Phishing
GET /fp.min.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 23:01:36 GMT
cache-control: max-age=2542
content-length: 31705
content-type: text/javascript
last-modified: Mon, 13 Jun 2022 11:23:14 GMT
accept-ranges: bytes
x-rgw-object-type: Normal
etag: "198f2f5b0a649f41fe890c59d37319aa"
x-amz-request-id: tx000000000000001d6fe64-0063daeb2e-2ee4b038-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
x-hw: 1675292496.dop232.sk1.t,1675292496.cds251.sk1.hn,1675292496.cds237.sk1.c
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2508
Expires: Wed, 01 Feb 2023 23:43:25 GMT
Date: Wed, 01 Feb 2023 23:01:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2508
Expires: Wed, 01 Feb 2023 23:43:25 GMT
Date: Wed, 01 Feb 2023 23:01:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2508
Expires: Wed, 01 Feb 2023 23:43:25 GMT
Date: Wed, 01 Feb 2023 23:01:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2508
Expires: Wed, 01 Feb 2023 23:43:25 GMT
Date: Wed, 01 Feb 2023 23:01:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd3cca56-2e75-4efc-8090-c33c65a99f80.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd3cca56-2e75-4efc-8090-c33c65a99f80.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b9af1fd56c0de8f128ddce88d49c1b4d
e3bb3d4950f7c0267f4476eef21872da332831aa
908153182f76362ff329803d9c11c06c66181e85e8e51dabd927f1f1ac630d5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd3cca56-2e75-4efc-8090-c33c65a99f80.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8944
x-amzn-requestid: 07495184-ede8-485c-94e8-5302ec348ea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: freiLHRPoAMFYbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dade0d-275437a54eceb40e302a7f55;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:47:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 86qoRJHXcrnBGi3REMF5q3ANzKdqEs5F3yFUBmiIt6SCbBVnhGe2Kw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:58:57 GMT
age: 3760
etag: "e3bb3d4950f7c0267f4476eef21872da332831aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 02:29:58 GMT
age: 73899
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85f439bb-b615-43ac-bd20-2466bff7ff50.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85f439bb-b615-43ac-bd20-2466bff7ff50.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d910c24f5a6108cb74103cd70692a703
9fe648fa464e46d16f685aca1704f3414eda4107
5cbe5e571e62555225621440203ae24a3b8c41ac7f49b6b731bc2c94e620797f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85f439bb-b615-43ac-bd20-2466bff7ff50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5561
x-amzn-requestid: 76ca969b-a840-4d5c-97c1-2dfd93b8f630
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdKYE3-IAMFqbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbdb-2729fe22420bcc0563c39aff;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: E91BIw8QT3vXXQY8GIPpnRqnTZV4paZ3wynf7UjLnjeIfwS0tiC1Gg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:12:07 GMT
age: 2970
etag: "9fe648fa464e46d16f685aca1704f3414eda4107"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4f8260f-0039-4dd4-be49-93afef573ecb.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4f8260f-0039-4dd4-be49-93afef573ecb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c56d08c13f357f91a14309b48d75e88
739ff0319e25b99fbf69b6a1c12159d4dda7549b
7f2a2004b2b587a18e99bae5ef216de0a0a12f4ab8e7c817df8eb8aa41f4be73
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4f8260f-0039-4dd4-be49-93afef573ecb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5011
x-amzn-requestid: 0760d4c6-1e6b-4e68-8c90-37229f8110e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5JE0AIAMFn8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6d-43fb25a727dd969b6219bd6f;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CWfxfWc7d8PGIAtD2kmys5PAmsudrBlMjqy7NsmzUl50QAQd_UfXCA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:00:20 GMT
age: 3677
etag: "739ff0319e25b99fbf69b6a1c12159d4dda7549b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
stormtrk.com/api/1.0/ping/pong?location=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0
200 OK 12 kB URL HTTP/2 stormtrk.com/api/1.0/ping/pong?location=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0
IP
File type JSON data\012- , ASCII text
Hash 2151ac6cdee8ac3e5e996c162416699b
802fd6ee037c3bf73729f2c9dfbf29d0bc2181ca
525c2a2924140cc84becc2e372b06f76e7cb7e0a90586c83f84465ab25d30aa1
GET /api/1.0/ping/pong?location=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0 HTTP/1.1
Host: stormtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://eid.surveyprogramm.com
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 23:01:36 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ynq0HFOr51i%2BP6zprkDSn2lVtEDJXevU21v45j9hQ%2BJ%2FXOg220uMp5rG6fvCN3RZJGUfCWndbG7%2BSlS9pLia59BBNOS7UMKvnNHUSiP4WxJz3pKuDqcYaIBSHWF7Lg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 792e4f52debbb509-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04301881-7728-4218-a61a-642cd5ffae53.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04301881-7728-4218-a61a-642cd5ffae53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0224e848c34cb32cf932ed99dfd8468a
31c1abac8979bca5a998a6649ca3e6f59c0fb2f5
f93d5a69758e57d4d2b0d307ce98ad5ea8d86b825108873e8ea5bc36567dc5c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04301881-7728-4218-a61a-642cd5ffae53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5061
x-amzn-requestid: a266acae-8f1e-4cd7-b93b-e40aa5393521
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdUpGcmoAMF16Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc1d-1fbae7785fccc58f71c1b3e9;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: PevXZz9rkBo3Cy6EooCVOpSoHyeKHMoYFjKRrvDld34WFWXzOmpANQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:11:31 GMT
age: 3006
etag: "31c1abac8979bca5a998a6649ca3e6f59c0fb2f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
api.imotech.video/bigoad/trackingview?it=1675292519167&title=%24500%20Amazon%20Gift%20Card&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0&host=eid.surveyprogramm.com&cookie_id=BA1.1.1822075179.1675292519&session_id=BA1.1.5964879930.1675292519&pixel_id=902760083831232256&ts=1675292526941&extra=%7B%22action%22%3A%22leave%22%2C%22type%22%3A1%2C%22wst%22%3A204%2C%22drt%22%3A1256%2C%22tdt%22%3A2008%2C%22lgt%22%3A9032%7D
200 OK 104 B URL HTTP/2 api.imotech.video/bigoad/trackingview?it=1675292519167&title=%24500%20Amazon%20Gift%20Card&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0&host=eid.surveyprogramm.com&cookie_id=BA1.1.1822075179.1675292519&session_id=BA1.1.5964879930.1675292519&pixel_id=902760083831232256&ts=1675292526941&extra=%7B%22action%22%3A%22leave%22%2C%22type%22%3A1%2C%22wst%22%3A204%2C%22drt%22%3A1256%2C%22tdt%22%3A2008%2C%22lgt%22%3A9032%7D
IP
File type ASCII text, with no line terminators
Hash d1bf00b3284cb24e90ad5f38536fb4ca
493ecbb44cb1177bcfc74e163e71e2d7dd586199
77aa9ef5d882a513ec54e44d6bdb8d3989604e0d35929d91d118e731a3ebd42e
POST /bigoad/trackingview?it=1675292519167&title=%24500%20Amazon%20Gift%20Card&referer=&resolution=1024*1280&lang=en-US&url=http%3A%2F%2Feid.surveyprogramm.com%2Fc%2Fb7ea57d7e03bcec0&host=eid.surveyprogramm.com&cookie_id=BA1.1.1822075179.1675292519&session_id=BA1.1.5964879930.1675292519&pixel_id=902760083831232256&ts=1675292526941&extra=%7B%22action%22%3A%22leave%22%2C%22type%22%3A1%2C%22wst%22%3A204%2C%22drt%22%3A1256%2C%22tdt%22%3A2008%2C%22lgt%22%3A9032%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://eid.surveyprogramm.com
Connection: keep-alive
Referer: http://eid.surveyprogramm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty/1.13.6.1
date: Wed, 01 Feb 2023 23:01:43 GMT
content-type: application/json
content-length: 104
X-Firefox-Spdy: h2
52.19.101.114
104.18.20.226
104.166.188.188
93.184.220.29
23.36.76.194