Overview

URLloginpageautumn.com/iyz4iVj63J/w3cn081fci/67ih5q9zip?q=iyz4iVj63J&s=848c9e02ce7411210ae4892bfe22c2d1
IP 172.67.172.186 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-26 21:19:19 UTC
StatusLoading report..
IDS alerts0
Blocklist alert4
urlquery alerts No alerts detected
Tags None

Domain Summary (12)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
community.akamai.steamstatic.com (4) 15488 2021-01-22 07:20:37 UTC 2022-09-26 11:05:22 UTC 23.36.77.51
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-26 12:15:18 UTC 34.120.237.76
loginpageautumn.com (2) 0 2022-09-23 12:33:42 UTC 2022-09-26 18:11:34 UTC 172.67.172.186 Unknown ranking
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-26 04:35:11 UTC 23.36.76.226
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-26 04:28:07 UTC 34.117.237.239
steamcommunity-a.akamaihd.net (23) 12205 2014-06-06 20:59:46 UTC 2022-09-26 10:09:31 UTC 23.36.76.232
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2022-09-26 16:08:16 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-26 05:45:55 UTC 44.242.41.15
steamcommunity.com (2) 4728 2018-06-12 23:40:36 UTC 2022-09-26 20:23:16 UTC 23.53.54.51
firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-09-26 12:59:20 UTC 143.204.55.35
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-26 04:26:56 UTC 34.160.144.191
ocsp.pki.goog (2) 175 2017-06-14 07:23:31 UTC 2022-09-26 04:27:13 UTC 142.250.74.3

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-09-26 2 loginpageautumn.com/iyz4iVj63J/w3cn081fci/67ih5q9zip?q=iyz4iVj63J&s=848c9e0 (...) Steam

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-26 2 loginpageautumn.com/Content/js/jquery.min.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-26 2 loginpageautumn.com Sinkholed
2022-09-26 2 loginpageautumn.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.172.186
Date UQ / IDS / BL URL IP
2023-02-17 18:39:46 +0000 0 - 0 - 4 www.columbiasmallbuy.shop/ 172.67.172.186
2022-10-15 11:56:23 +0000 0 - 0 - 1 datehornyflings.com/?utm_source=WmLfna5gs3NNs (...) 172.67.172.186
2022-10-11 22:29:17 +0000 0 - 0 - 4 hobbygulf.com/fms-red-dragonfly-900mm-main-la (...) 172.67.172.186
2022-09-26 21:19:19 +0000 0 - 0 - 4 loginpageautumn.com/iyz4iVj63J/w3cn081fci/67i (...) 172.67.172.186
2022-09-18 20:11:52 +0000 0 - 0 - 3 datehornyflings.com/?utm_source=WmLfna5gs3NNs (...) 172.67.172.186


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-25 23:31:02 +0000 0 - 0 - 1 torrage.info/torrent.php?h=8D824729948DD3FFF9 (...) 104.21.233.134
2023-03-25 23:30:58 +0000 0 - 6 - 0 game-porn.org/porn-sex-game/407-rarearchivega (...) 188.114.97.1
2023-03-25 23:30:43 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/10878322574961 (...) 162.159.129.233
2023-03-25 23:30:42 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/10892550638574 (...) 162.159.129.233
2023-03-25 23:30:15 +0000 0 - 1 - 0 grabify.link/0HE4Y0 104.26.8.202


Last 1 reports on domain: loginpageautumn.com
Date UQ / IDS / BL URL IP
2022-09-26 21:19:19 +0000 0 - 0 - 4 loginpageautumn.com/iyz4iVj63J/w3cn081fci/67i (...) 172.67.172.186


Last 2 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-10-09 21:55:00 +0000 0 - 0 - 1 monitoring-servers.pro/ogJdXlma7n/c25n0jfy86/ (...) 104.21.68.170
2022-09-23 08:22:20 +0000 0 - 0 - 1 blastmode-premier.pro/ogJdXlma7n/c25n0jfy86/9 (...) 172.67.198.80

JavaScript

Executed Scripts (18)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (52)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 21:15:22 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Vc4gMZH7wh0urafNd0tdZ_TpvPdtrIVTZmBe_AfdxSy7sHBanmr1sQ==
Age: 226


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4777
Expires: Mon, 26 Sep 2022 22:38:45 GMT
Date: Mon, 26 Sep 2022 21:19:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F35BB3A8C877DD8D3C5920F3C917722F12B157AFF398E2EC30FAB51FA6CAA2EF"
Last-Modified: Mon, 26 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11666
Expires: Tue, 27 Sep 2022 00:33:34 GMT
Date: Mon, 26 Sep 2022 21:19:08 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: CRckAI5kKGSVhnABuhkwCQT2bbLZB1Vb+l3Wwnfvql2MjpJDAsYENz0wcHNRU168xGn8fdalbBs=
x-amz-request-id: 2PQPQC5WKW9D3F8S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 26 Sep 2022 20:48:54 GMT
age: 1814
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            POST /s/gts1p5/q55hUY-Qbm0 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 26 Sep 2022 21:19:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 26 Sep 2022 21:19:08 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /s/gts1p5/q55hUY-Qbm0 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 26 Sep 2022 21:19:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 26 Sep 2022 21:10:46 GMT
Expires: Mon, 26 Sep 2022 21:35:35 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FsS9dfvf0Sv0LuvMSbYxJXp1wAoUXJ2wL2r6KhSif4TBoe7kOrg9fg==
Age: 502


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2576
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 21:19:08 GMT
Last-Modified: Mon, 26 Sep 2022 20:36:12 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5444
Cache-Control: 'max-age=158059'
Date: Mon, 26 Sep 2022 21:19:08 GMT
Last-Modified: Mon, 26 Sep 2022 19:48:24 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /public/css/skin_1/home.css?v=pJzVFGIy2mmE HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Server: nginx
Content-Length: 3447
ETag: "pTH-Ya7jG3VB"
Last-Modified: Sun, 29 Mar 1970 04:58:47 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with CRLF, LF line terminators
Size:   3447
Md5:    54ba913a2aa70b377972fa1f5ed28df9
Sha1:   e8bc8c1d09773a7fdb987b064fa18efe09fd2148
Sha256: 1a97469aa0900ea0ff5a5754afdf8715cf95a9508c6da64eab0b70f1282d1ea2
                                        
                                            GET /public/shared/css/buttons.css?v=DivqMdJb8hoZ HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Server: nginx
Content-Length: 4170
ETag: "n-eRNszNIRMH"
Last-Modified: Sun, 29 Mar 1970 04:58:47 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with CRLF, LF line terminators
Size:   4170
Md5:    c3f0ebea121195411afc806e2f3f1733
Sha1:   5851f359fff0e798d90acc7daf18b3bbb3e6ac75
Sha256: 5af78d3a00a008c76ee20fcff3f4c57e03f42e25002f19f1a53c17efbf8f20f8
                                        
                                            GET /public/shared/css/motiva_sans.css?v=qIG_iZC1Vj_d HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Server: nginx
Content-Length: 651
ETag: "-DH0xTYpnVe2"
Last-Modified: Sun, 29 Mar 1970 04:58:47 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   651
Md5:    4503b74214d5f196b14aaac24b279632
Sha1:   d668ce70a480b5cfb458150a213b5127cc84098f
Sha256: 7e84f85898744121d73dcdee14825aff593cc95fd79590fcc44e650b4a6dbf3f
                                        
                                            GET /public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: ".isFTSRckeNhC"
Server: nginx
Content-Length: 33169
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, max-age=10853666
Expires: Mon, 30 Jan 2023 12:13:35 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32086), with CRLF line terminators
Size:   33169
Md5:    d6b1527f6419bd2e74ec2d71604d84d2
Sha1:   95ff30102baa2a70f9259e21179d48f0c7ec951b
Sha256: 37aca6764d5bf1fc67ec762f42c6e2195b2fcb6e7f80f654e74543e437344aa2
                                        
                                            GET /public/shared/css/login.css?v=1Q_lB0hwKf62 HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Server: nginx
Content-Length: 4533
ETag: "2MIlfWoxk9op"
Last-Modified: Sun, 29 Mar 1970 04:58:47 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  assembler source, ASCII text, with CRLF, LF line terminators
Size:   4533
Md5:    f70a077010785d7d4e5706168cbc9736
Sha1:   d8d6157d009b9e439adf700674017078d934ff35
Sha256: e57e0a708814bd1b31a232eef10b8d7d9cb240adb0d6207f8635bd80060f8eb9
                                        
                                            GET /public/shared/css/shared_global.css?v=J9xEepZktuzb HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Server: nginx
Content-Length: 23195
ETag: "hIyLrtEM3Y2r"
Last-Modified: Sun, 29 Mar 1970 04:58:47 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (4303), with CRLF, LF line terminators
Size:   23195
Md5:    2db9a86b8e050b4508706d47dee33616
Sha1:   21032329edd1ff486a0c211716068db4a53385fe
Sha256: 2d94033395f5b24c387ad5d25dc4e2a26200bd1d05dca863d18bebc8e5433796
                                        
                                            GET /public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Content-Length: 1318
ETag: "dfMhuy-Lrpyo"
Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, max-age=11935375
Expires: Sun, 12 Feb 2023 00:42:04 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1318
Md5:    dfcd84a5ad6ac977c31c27c8042848dd
Sha1:   987b509310b28de244fcc4cd294b4e32edf4eb41
Sha256: f129d1a5b45d12682013e4d8a0545902dd9c2a8c467b636fb74ee28ae727890e
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: INR6uoDFuPU+S2v0eMUwfw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         44.242.41.15
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NreUUq9AMThAXwxBXiQ0QCasr/U=

                                        
                                            GET /public/shared/css/shared_responsive.css?v=Sqh2tLHzRZFc HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Server: nginx
Content-Length: 6151
ETag: "dzKWJSTeFdIo"
Last-Modified: Sun, 29 Mar 1970 04:58:47 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1667), with CRLF, LF line terminators
Size:   6151
Md5:    2d7fa93d5a54f9e2e70c09ab090a92ce
Sha1:   7f011c19059a1458e8afe6b834be5e8c03eb49cc
Sha256: 5554617221738e9b4fa3d3716b36edaa8f7ba5ac1839eeee30a8329de7c5dc96
                                        
                                            GET /public/css/skin_1/header.css?v=nsrVgIBuVLKM HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/css;charset=UTF-8
                                        
Server: nginx
Content-Length: 4137
ETag: "g7VmRhGIDEiu"
Last-Modified: Sun, 29 Mar 1970 04:58:47 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (629), with CRLF line terminators
Size:   4137
Md5:    38c2d9a9967836d55b42c633fd691630
Sha1:   0310fcc0d6e1704ea1a8324d70238ed9fa0aa2a0
Sha256: fb4b8907921d0d00dd728a964215b01e1d9200466181e3326182f207ddae3e26
                                        
                                            GET /public/shared/javascript/tooltip.js?v=.gcRSUfx-SLlh HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Content-Length: 4229
ETag: ".zYHOpI1L3Rt0"
Last-Modified: Tue, 22 Mar 2022 23:23:42 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with CRLF line terminators
Size:   4229
Md5:    6858f2e4b73c550c6441bcda749ea001
Sha1:   a228b8d2471a16c7f45082c3908cead87c7c950f
Sha256: 9da82e306250d85f550eb93037867aee9185da39cd79f8fd56fa6d86a63ebd4a
                                        
                                            GET /public/shared/javascript/shared_responsive_adapter.js?v=qLEcRmcHn-kc&l=english HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Content-Length: 6899
ETag: "iaNf89ykEMuF"
Last-Modified: Sun, 29 Mar 1970 04:58:47 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF line terminators
Size:   6899
Md5:    1776409564cceee5791dce3d1d65775f
Sha1:   54a6228146727db8f81a132830fb7fbc636428a1
Sha256: 59563aabe9b365fc1ce10053617efb901036c6235048fb5f7ab5186f79412aab
                                        
                                            GET /public/javascript/scriptaculous/_combined.js?v=9XVsa_Ni33oN&l=english&load=effects,controls,slider,dragdrop HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Content-Length: 32468
ETag: "OeNIgrpEF8tL"
Last-Modified: Sun, 29 Mar 1970 04:58:47 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with CRLF line terminators
Size:   32468
Md5:    b97bad54f72cd6d150cd7dfc569dd3c5
Sha1:   f2f250f67c7f007805daebafe7d263c983b6abff
Sha256: 979949516db6ea085e7ee55465f5f96335d2838cecbe24a39b9faa87a7033aa0
                                        
                                            GET /public/images/login/throbber.gif HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Content-Length: 3208
Last-Modified: Fri, 05 Jan 2018 01:34:49 GMT
ETag: "5a4ed639-c88"
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 32 x 32\012- data
Size:   3208
Md5:    928e54c4c9683d8dd32867ee992d73c4
Sha1:   83b3252952e1e8c98deb5e6eb64e150c594dd97b
Sha256: 0c4d1b66cbed8c0ba7bfe1d047409e80b99684794ba66e9556503890eae17f2d
                                        
                                            GET /public/shared/images/responsive/header_logo.png HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 10863
Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT
ETag: "5a4ed654-2a6f"
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced\012- data
Size:   10863
Md5:    a4e79c73ee13cb25b60fc4b0ba1f690c
Sha1:   b690c31b2eb1b0eb085e91aaae7e79f03debe7c1
Sha256: 6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8
                                        
                                            GET /public/images//skin_1/blue_refresh_icon.png HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 500
Last-Modified: Fri, 05 Jan 2018 01:34:50 GMT
ETag: "5a4ed63a-1f4"
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Size:   500
Md5:    667035fb9e237f93ed15df8f3d83a785
Sha1:   0728a954629c5966e1a1c4dee20129e86752a4a9
Sha256: 97b179c7e553d74ed86b7663fa0722b76854f0ef2398fe6fbadd98f2d0c1cdfa
                                        
                                            GET /public/shared/images/header/globalheader_logo.png?t=962016 HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 6369
Last-Modified: Tue, 18 Dec 2018 23:16:19 GMT
ETag: "5c197fc3-18e1"
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 264 x 66, 8-bit/color RGBA, non-interlaced\012- data
Size:   6369
Md5:    1e7065e5a2b5989048100a51214800fc
Sha1:   6adf108a549d12ce70a5a9d4fa9474a216307e89
Sha256: 5438b6377ef91265bc90d9ee9c75cf703514d03f0ff9a51bed3bb4ab5a3bb699
                                        
                                            GET /public/images/signinthroughsteam/icon_info.png HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 3421
Last-Modified: Fri, 05 Jan 2018 01:34:50 GMT
ETag: "5a4ed63a-d5d"
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data
Size:   3421
Md5:    2374879b03f3153a3f1d3aa98d9c8006
Sha1:   aff35c2b6096e8dd3950ccb050d2f412f3c1cafc
Sha256: 0ad9ddd2543a22ec2270326fb195c2bb6fb1b46186e89e885a83ae24386176f2
                                        
                                            GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 3777
Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT
ETag: "5a4ed654-ec1"
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced\012- data
Size:   3777
Md5:    eabc76eb57feae44add7faead028521e
Sha1:   4e3e53938fad15661d2d046a868338841a95db19
Sha256: fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa
                                        
                                            GET /public/images/skin_1/footerLogo_valve.png?v=1 HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 3737
Last-Modified: Fri, 05 Jan 2018 01:34:51 GMT
ETag: "5a4ed63b-e99"
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced\012- data
Size:   3737
Md5:    1626f52addb7c56fe3679d82108c62e9
Sha1:   2b414092d66ecff528950093a655f755c3c7f3b5
Sha256: ae9f6c61e25d15882bf57bde193d10d375bd315c9741cabda11d700fd1bb7dd1
                                        
                                            GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 1846
Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT
ETag: "5a4ed654-736"
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced\012- data
Size:   1846
Md5:    574c350c7b23ae794d5276f8580e0838
Sha1:   235c7b35c3468f8915eca01f7abdb43d34079609
Sha256: 8b97ba0dac22fe6704c1f6d95fe79613f33017804f256abb9006df0442491787
                                        
                                            GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 
Host: community.akamai.steamstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://steamcommunity-a.akamaihd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.77.51
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 291
Last-Modified: Wed, 21 Mar 2018 00:07:17 GMT
ETag: "5ab1a235-123"
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced\012- data
Size:   291
Md5:    a2796187c58c7e948159e37d6990ecc2
Sha1:   4209cd85add507247f9ce5a87a8c9095b54ee417
Sha256: 23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082
                                        
                                            GET /public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 HTTP/1.1 
Host: community.akamai.steamstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://loginpageautumn.com
Connection: keep-alive
Referer: https://steamcommunity-a.akamaihd.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.77.51
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Server: nginx
Content-Length: 118736
Last-Modified: Tue, 28 Jul 2020 23:16:27 GMT
ETag: "5f20b1cb-1cfd0"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSan\012- data
Size:   118736
Md5:    ce6bda6643b662a41b9fb570bdf72f83
Sha1:   87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8
Sha256: 0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6
                                        
                                            GET /public/captcha.php?gid=-1 HTTP/1.1 
Host: steamcommunity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.53.54.51
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 1148
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 206 x 40, 8-bit/color RGB, non-interlaced\012- data
Size:   1148
Md5:    01305f0b7db674755d943a15ff68ff0c
Sha1:   add44180a66a98d1059b467a810e92719695654f
Sha256: befe4a53eb743d780f4fb80322024c08baf4073e00e3a69b02dd6a7668211fdf
                                        
                                            GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1 
Host: community.akamai.steamstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://loginpageautumn.com
Connection: keep-alive
Referer: https://steamcommunity-a.akamaihd.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.77.51
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Server: nginx
Content-Length: 122684
Last-Modified: Tue, 28 Jul 2020 23:16:28 GMT
ETag: "5f20b1cc-1df3c"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 67 x 336, 8-bit/color RGBA, non-interlaced\012- data
Size:   4224
Md5:    8045d45ab02637f18f218e2edb9da945
Sha1:   b1a98fd05293f5e95ef30e44fcca299f19b5ffce
Sha256: 9152d0aecc3dfc17e3265cc54fc3b21dc6c5ea1b472aa90da440ae96552a2ac8
                                        
                                            GET /public/shared/images/login/code_box.png?v=1 HTTP/1.1 
Host: community.akamai.steamstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://steamcommunity-a.akamaihd.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.77.51
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Content-Length: 3297
Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT
ETag: "5a4ed654-ce1"
Accept-Ranges: bytes
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image data, 222 x 28, 8-bit/color RGBA, non-interlaced\012- data
Size:   3297
Md5:    9b35da8d0e756c8fe966477376a96112
Sha1:   f4981f73f708d549525ca38af1d840515021f8aa
Sha256: a24e4e2eb63ba954b29ceef24b0275c146bb401038970b7ed1a84740347a2017
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: steamcommunity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.53.54.51
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: nginx
Cache-Control: public,max-age=86400
Expires: Thu, 21 Apr 2022 22:34:30 GMT
Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT
Content-Length: 38554
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data
Size:   38554
Md5:    231913fdebabcbe65f4b0052372bde56
Sha1:   553909d080e4f210b64dc73292f3a111d5a0781f
Sha256: 9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad
                                        
                                            GET /public/shared/javascript/crypto/rsa.js HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Last-Modified: Fri, 05 Jan 2018 01:35:16 GMT
ETag: ".2DapVp3yyevw"
Server: nginx
Content-Length: 996
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=534
Expires: Mon, 26 Sep 2022 21:28:03 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   996
Md5:    ad2302d1b8d604ca3eb7235c7d6a047a
Sha1:   5e90f36dd2a78af725630d81105082cc8df11624
Sha256: 3d348c8965b7390ac790ccc31674a4ee1c9e8b3edd5f70ccbe88cf3ef5f6a9c7
                                        
                                            GET /public/shared/javascript/crypto/jsbn.js HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Content-Length: 11528
ETag: "P5-v3JwM3dJd"
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=95
Expires: Mon, 26 Sep 2022 21:20:44 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (377), with CRLF line terminators
Size:   11528
Md5:    92ab637c3b3cd45f0ec36d0b21b76210
Sha1:   2afe1b998b954cd3ee9a3048465a58de1dc1db3c
Sha256: 91924835c9bbec5964fee3573f1ca4e109cb95e2a66fbf2f8fe766501a345bfb
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7932
Expires: Mon, 26 Sep 2022 23:31:22 GMT
Date: Mon, 26 Sep 2022 21:19:10 GMT
Connection: keep-alive

                                        
                                            GET /public/shared/javascript/shared_global.js?v=MJxus4NSxkZn&l=english HTTP/1.1 
Host: steamcommunity-a.akamaihd.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.232
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Server: nginx
Content-Length: 41442
ETag: "luyGr0osipNp"
Last-Modified: Sun, 29 Mar 1970 04:58:47 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Cache-Control: public, must-revalidate, max-age=0
Expires: Mon, 26 Sep 2022 21:19:09 GMT
Date: Mon, 26 Sep 2022 21:19:09 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7932
Expires: Mon, 26 Sep 2022 23:31:22 GMT
Date: Mon, 26 Sep 2022 21:19:10 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7932
Expires: Mon, 26 Sep 2022 23:31:22 GMT
Date: Mon, 26 Sep 2022 21:19:10 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   11251
Md5:    be6de464188b2dbb563892582c71e760
Sha1:   5b2c70a682bdd66977d6e9f3752136bbc75bcaad
Sha256: fd2e42a170e021e792a80b388376b03d816b53d42439b0b8be7fa8c82bee6514
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7932
Expires: Mon, 26 Sep 2022 23:31:22 GMT
Date: Mon, 26 Sep 2022 21:19:10 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8637
x-amzn-requestid: 07dc23e0-000f-4f6c-8d2b-0e65d88be270
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvvEenoAMFr0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-520803124760abc216152d7b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mToVKJcSAtJB1AOuQ-Y9o_EZzyhUuZJivVa3DLql5FwzK4NC82kh5Q==
via: 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:06:17 GMT
age: 83573
etag: "e49306a3713cb724be024a4ddb5e90645718a718"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8637
Md5:    d02ede0c964f3346fd53ae2950bf2a62
Sha1:   e49306a3713cb724be024a4ddb5e90645718a718
Sha256: c0e653d89656016c55aca9b198b9191620f1ae9a3c45742a90744bd74c4f9505
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: W6ZD1652Yn1xqZG7ehDcirlYoG8Hcsrdj11Fzfgj7zb-OiU8xHj1gw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:37:19 GMT
age: 85311
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Size:   12826
Md5:    b3a72e81317074689a71dac7059e4b6a
Sha1:   b6d56333d7f1ea7ddc8838d84de498ff913c5464
Sha256: e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7838a122-2b2e-4e4c-9bcc-7c6b46a93b1e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11728
x-amzn-requestid: bf60e58f-c4f4-45c7-923b-0d1539f720f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUCGGw7oAMF3wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd40-32043c1b1411544f5d00edc0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:50:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZRG0Axnhc5RY5rDbnnbauco9dpPeFdkP01UxkpNYI5pgSbfGKWcikw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:16:26 GMT
age: 82964
etag: "9660bb2d38079182efbd11d7a687bfc7f9d30751"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   118892
Md5:    7a0b3748434eb4d95dc1979fe357a299
Sha1:   4a3d517fd8a0f57c70270801272d4964c8572d7e
Sha256: 0f8143b9e2db1afefa62042ab4159ba87a7555cf38a58aa7e2b801c9f80da9b0
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5157
x-amzn-requestid: b5748f49-693f-4bc3-a850-cb68e770de24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUG9GUHIAMF7pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd5f-5d2aaa212cf1be2506593746;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:51:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4h9lb_7egxb2hBbxjcS_cpZ5lDq6Lx-c_WUZyRHdUA0YTwr6kgDuiQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:10:16 GMT
age: 83334
etag: "85e378d0fff856832a8dd01743516b9476fed8c6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5157
Md5:    2fe8c4f0c70fb6c1f4259eabedc7015e
Sha1:   85e378d0fff856832a8dd01743516b9476fed8c6
Sha256: 508a1c7d350fcf82d1ece0b99f8557b2f300c7c1148f28c3ae9fece20530e4b6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10318
x-amzn-requestid: 6a205445-8a9e-4f25-b144-ba6e6934d383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSlhFNAIAMFmBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330caef-61ecbf9154cd56131b940ac0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qP5-TglQAoTGc78-rIK27mKRTS_WthN0OpiiMqSF-y2rmWxVOyfNVw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:57:14 GMT
age: 84116
etag: "cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10318
Md5:    a90590f26bae9ad9e95ffdfbfb7dd21d
Sha1:   cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3
Sha256: 33fe3394213e01d11c3e005cb5a678ba74511704d4132fc2bd9f7ad4e1b7dbfc
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5980
x-amzn-requestid: fbf0c390-da24-49e2-8492-43e29e5d4bb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHCGJVoAMFgxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc6-1f9b1b7d63467c58702e6d7e;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:38 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pt7rJi8EIQFBk0gHQZ1WnjvThPba86XZCGFs83l1ZW2dj-_6bZprAA==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 84554
etag: "12aac1bd22e675f09a220de08b4656e801c2e647"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5980
Md5:    ef17205adb2b478d3bff54b048208d22
Sha1:   12aac1bd22e675f09a220de08b4656e801c2e647
Sha256: 620fe39cf421ed3a21e968570f7e863d69224113be867ec2457ed3850ea113f6
                                        
                                            GET /Content/js/jquery.min.js HTTP/1.1 
Host: loginpageautumn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://loginpageautumn.com/iyz4iVj63J/w3cn081fci/67ih5q9zip?q=iyz4iVj63J&s=848c9e02ce7411210ae4892bfe22c2d1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         172.67.172.186
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
date: Mon, 26 Sep 2022 21:19:08 GMT
last-modified: Mon, 26 Sep 2022 19:46:43 GMT
etag: W/"633201a3-17b8b"
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZOSaO%2FcRjITMuF85AQR4LnWZH661bUX0k3NelEu14uG83ic5ANeQLvECBGDGBtNYPwIjg79QlQ3JYKcJz3lpfX5sKnYXNGSeFY3LVemgfDJu4HAh8XnkY48qdDpqsMlKUU1fu41i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750f093ebef3b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /iyz4iVj63J/w3cn081fci/67ih5q9zip?q=iyz4iVj63J&s=848c9e02ce7411210ae4892bfe22c2d1 HTTP/1.1 
Host: loginpageautumn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         172.67.172.186
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Mon, 26 Sep 2022 21:19:08 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lB38wMn5i2S187g7m52pbWQPR1E%2Fe2RmY0RoYcUvCmuDlpd7KOtO1MJPpFre5k05OahVhK1G4KH%2FpjpvnOL%2FyfkvBLR1pvR9F1h8bJ0hfnn4eUWFEpS7UxwFkVgIXC3BRD%2FW64X6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 750f093d2ccdb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - openphish: Steam
    - quad9: Sinkholed