Report - nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/

Report Overview

Submitted URL
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
IP
89.43.67.170
ASN
#51559 Netinternet Bilisim Teknolojileri AS
Submitted
2022-12-02 17:38:15
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
app.nickel.eu	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.2 kB	202 kB	23.36.79.33
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	46 kB	34.120.237.76
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	2.1 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
nazilli.murategitim.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	5.8 kB	39 kB	89.43.67.170
code.jquery.com	634	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	378 B	31 kB	69.16.175.10
rawgit.com	52214	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	405 B	39 kB	188.114.96.1
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.42.74.230
static-resources.nickel.eu	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.5 kB	98 kB	23.36.79.33
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	4.4 kB	23.36.77.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-12-02	medium	nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/	BNP Paribas

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-02	medium	nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	code.jquery.com/jquery-3.6.0.min.js	90 kB	2023-03-07	2024-04-25
Pretty URL code.jquery.com/jquery-3.6.0.min.js IP 69.16.175.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-04-25 08:56:22 Times Seen261119 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

	rawgit.com/RobinHerbots/Inputmask/5.x/dist/jquery.inputmask.js	199 kB	2023-03-08	2023-03-11
Pretty URL rawgit.com/RobinHerbots/Inputmask/5.x/dist/jquery.inputmask.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:42:43 Last Seen2023-03-11 23:16:12 Times Seen1 Hash 3bb5c43196073208f3858b024d4be570 469a1197a2902208334afc855766e09a4b063071 c366f43ed87fe29c3971a5d10cbd9989db767467a17d12bd20cf868c45e3b1b9 Loading...

	nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/	4.1 kB	2023-03-07	2024-04-08
Pretty URL nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/ IP 89.43.67.170 ASN #51559 Netinternet Bilisim Teknolojileri AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:40:00 Last Seen2024-04-08 19:55:30 Times Seen198 Hash c8488fb9128b2dcd81a903c9e23d253a 20dad03e87d487cfe730fb38115fb5bf2836e5b4 5786edd881dcfcf78a4ee4f15b73b8eef66ef80a343d364da03f95031c95602c Loading...

HTTP Transactions (37)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5920
Expires: Fri, 02 Dec 2022 19:16:45 GMT
Date: Fri, 02 Dec 2022 17:38:05 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2775
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 17:38:05 GMT
Last-Modified: Fri, 02 Dec 2022 16:51:50 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 17:19:57 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1088
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3851
Expires: Fri, 02 Dec 2022 18:42:16 GMT
Date: Fri, 02 Dec 2022 17:38:05 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: f7rSynDqOEjsW05PMGrJg/9vIuZ5w+oJ7o/AQbmW5LJ51ZtCButFmhysxjTNbhlvAN123/1B1jc=
x-amz-request-id: 3W5GXSD3GJ4XGSBH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 16:46:11 GMT
age: 3114
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 17:38:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/

89.43.67.170

200 OK

24 kB

URL HTTP/2
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
IP
89.43.67.170:0
ASN
#51559 Netinternet Bilisim Teknolojileri AS

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1156), with CRLF line terminators
Size
24 kB (23623 bytes)
Hash
bda6c80652fdc685291c6e5799489019
534d5f8299c87753786cfd69ea7471c6c7b2575b
dbc690d8df4d6c2c30342156942c2b0082ebc6765a265ab0ba9561c6add382d8

Detections

Analyzer	Verdict	Alert
openphish	BNP Paribas
fortinet	Phishing

HTTP Headers

GET /app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/ HTTP/1.1
Host: nazilli.murategitim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: PHPSESSID=odekkob5glfv7bots4ro9bb1l0; path=/
vary: Accept-Encoding
content-encoding: br
content-length: 23623
content-type: text/html; charset=UTF-8
date: Fri, 02 Dec 2022 17:38:05 GMT
server: Apache
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 17:08:57 GMT
cache-control: public,max-age=3600
age: 1748
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/86fffa26.chunk.css

89.43.67.170

200 OK

2.2 kB

URL HTTP/2
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/86fffa26.chunk.css
IP
89.43.67.170:0
ASN
#51559 Netinternet Bilisim Teknolojileri AS

File type
ASCII text, with CRLF line terminators
Size
2.2 kB (2237 bytes)
Hash
6ecf7b3275aba1363eced51f07b8776f
6164b551f5cd9a53f1e8c957f4baeffa95bf8876
2a65f279ba7b21a0c28af42fb2394fb20332014633bcbddd0561ec717049d9a1

HTTP Headers

GET /app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/86fffa26.chunk.css HTTP/1.1
Host: nazilli.murategitim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
Cookie: PHPSESSID=odekkob5glfv7bots4ro9bb1l0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 15:26:58 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 2237
content-type: text/css
date: Fri, 02 Dec 2022 17:38:05 GMT
server: Apache
X-Firefox-Spdy: h2

nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/24571a40.chunk.css

89.43.67.170

200 OK

4.8 kB

URL HTTP/2
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/24571a40.chunk.css
IP
89.43.67.170:0
ASN
#51559 Netinternet Bilisim Teknolojileri AS

File type
ASCII text, with CRLF line terminators
Size
4.8 kB (4835 bytes)
Hash
82f7cc58fa3c84641d942626e7f44458
fbdf2af5127b367864328fc3248070737abaceca
99872b1c0100670a73b3cc0df462ad67153d6abb87896537091b5dd0de39be11

HTTP Headers

GET /app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/24571a40.chunk.css HTTP/1.1
Host: nazilli.murategitim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
Cookie: PHPSESSID=odekkob5glfv7bots4ro9bb1l0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 16:40:26 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 4835
content-type: text/css
date: Fri, 02 Dec 2022 17:38:05 GMT
server: Apache
X-Firefox-Spdy: h2

nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/des.css

89.43.67.170

200 OK

1.8 kB

URL HTTP/2
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/des.css
IP
89.43.67.170:0
ASN
#51559 Netinternet Bilisim Teknolojileri AS

File type
ASCII text
Size
1.8 kB (1794 bytes)
Hash
d6daac8af2a63fbd12291291f0ff72b0
23fc923f051ac38305dec1a94eaacc464afde36b
28415454d9aac7a834c098568f049ddd351f1d0a2219609a206f0ea59e72ead8

HTTP Headers

GET /app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/des.css HTTP/1.1
Host: nazilli.murategitim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
Cookie: PHPSESSID=odekkob5glfv7bots4ro9bb1l0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 15:21:04 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1794
content-type: text/css
date: Fri, 02 Dec 2022 17:38:05 GMT
server: Apache
X-Firefox-Spdy: h2

nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/f55d3599.chunk.css

89.43.67.170

200 OK

804 B

URL HTTP/2
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/f55d3599.chunk.css
IP
89.43.67.170:0
ASN
#51559 Netinternet Bilisim Teknolojileri AS

File type
ASCII text, with CRLF line terminators
Size
804 B (804 bytes)
Hash
3a0b70b26928a707ea72bfe49c256a90
038ebe49f6bf07f6099ce2aa970ff7316adf453d
4e148680051a3ee8e887a6aabf33862275d3a1e10b24f4e8e80978497c4d6a15

HTTP Headers

GET /app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/f55d3599.chunk.css HTTP/1.1
Host: nazilli.murategitim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
Cookie: PHPSESSID=odekkob5glfv7bots4ro9bb1l0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 16:29:36 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 804
content-type: text/css
date: Fri, 02 Dec 2022 17:38:05 GMT
server: Apache
X-Firefox-Spdy: h2

nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/645939e1.chunk.css

89.43.67.170

200 OK

1.4 kB

URL HTTP/2
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/645939e1.chunk.css
IP
89.43.67.170:0
ASN
#51559 Netinternet Bilisim Teknolojileri AS

File type
ASCII text, with CRLF line terminators
Size
1.4 kB (1418 bytes)
Hash
c6d62407dab5b0c0ad4cc5c36921ab66
d4fe9a6348388671d11a1ef8958c8e9a25ac837d
9e59698bbdd0408db66b34b0197328221d47157f314e95ba6c134ef897faa8bc

HTTP Headers

GET /app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/645939e1.chunk.css HTTP/1.1
Host: nazilli.murategitim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
Cookie: PHPSESSID=odekkob5glfv7bots4ro9bb1l0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 15:20:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 1418
content-type: text/css
date: Fri, 02 Dec 2022 17:38:05 GMT
server: Apache
X-Firefox-Spdy: h2

nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/fe9185d1.chunk.css

89.43.67.170

200 OK

800 B

URL HTTP/2
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/fe9185d1.chunk.css
IP
89.43.67.170:0
ASN
#51559 Netinternet Bilisim Teknolojileri AS

File type
ASCII text
Size
800 B (800 bytes)
Hash
3bb6adfed4dccfec76d77eeb03ffd2b5
b0f14cfb4499ec193b42b5b80ed7d6eb137f4ad0
979b280a2e2142333d57f47086b0798dcd7db939efaaa94040d4223f83ac42e2

HTTP Headers

GET /app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/fe9185d1.chunk.css HTTP/1.1
Host: nazilli.murategitim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
Cookie: PHPSESSID=odekkob5glfv7bots4ro9bb1l0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
last-modified: Thu, 02 Dec 2021 16:40:32 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-length: 800
content-type: text/css
date: Fri, 02 Dec 2022 17:38:05 GMT
server: Apache
X-Firefox-Spdy: h2

nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/2282daa7.chunk.css

89.43.67.170

404 Not Found

315 B

URL HTTP/2
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/2282daa7.chunk.css
IP
89.43.67.170:0
ASN
#51559 Netinternet Bilisim Teknolojileri AS

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/2282daa7.chunk.css HTTP/1.1
Host: nazilli.murategitim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
Cookie: PHPSESSID=odekkob5glfv7bots4ro9bb1l0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Fri, 02 Dec 2022 17:38:05 GMT
server: Apache
X-Firefox-Spdy: h2

nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/74.b7389af6.chunk.css

89.43.67.170

404 Not Found

315 B

URL HTTP/2
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/74.b7389af6.chunk.css
IP
89.43.67.170:0
ASN
#51559 Netinternet Bilisim Teknolojileri AS

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/74.b7389af6.chunk.css HTTP/1.1
Host: nazilli.murategitim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
Cookie: PHPSESSID=odekkob5glfv7bots4ro9bb1l0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Fri, 02 Dec 2022 17:38:05 GMT
server: Apache
X-Firefox-Spdy: h2

nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/65.045f2d82.chunk.css

89.43.67.170

404 Not Found

315 B

URL HTTP/2
nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/65.045f2d82.chunk.css
IP
89.43.67.170:0
ASN
#51559 Netinternet Bilisim Teknolojileri AS

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
315 B (315 bytes)
Hash
a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

HTTP Headers

GET /app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/assets/css/65.045f2d82.chunk.css HTTP/1.1
Host: nazilli.murategitim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/app-nickel/CLIqWDoKsRui5AL3sfyTPMh4S8BWbUQ1fdRAw6CerWA/clients/
Cookie: PHPSESSID=odekkob5glfv7bots4ro9bb1l0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Fri, 02 Dec 2022 17:38:05 GMT
server: Apache
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.6.0.min.js

69.16.175.10

200 OK

31 kB

URL HTTP/2
code.jquery.com/jquery-3.6.0.min.js
IP
69.16.175.10:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (65447)
Size
31 kB (30875 bytes)
Hash
899f0189aaf034bbba5340f724d91dfa
210ea9de03968edb9d839ba4a0ce2d48666a8ab8
949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f

HTTP Headers

GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 02 Dec 2022 17:38:05 GMT
content-encoding: gzip
content-length: 30875
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15d9d"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1670002685.dop211.sk1.t,1670002685.cds257.sk1.hn,1670002685.cds210.sk1.c
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
3ac6b3a4cce946653315186f518eae07
4701af5aea2c3d4c8d35138afa3b01adaf101a9a
a875aab8c4d9da25a5d5da7d9301eed6f6b450c1a2ae4e55565be39f3af3dd5c

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4095
Cache-Control: max-age=92605
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 17:38:05 GMT
Etag: "6388eebb-116"
Expires: Sat, 03 Dec 2022 19:21:30 GMT
Last-Modified: Thu, 01 Dec 2022 18:13:15 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2773
Cache-Control: max-age=144902
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 17:38:05 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 09:53:07 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

rawgit.com/RobinHerbots/Inputmask/5.x/dist/jquery.inputmask.js

188.114.96.1

200 OK

38 kB

URL HTTP/2
rawgit.com/RobinHerbots/Inputmask/5.x/dist/jquery.inputmask.js
IP
188.114.96.1:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (532)
Size
38 kB (38294 bytes)
Hash
b978da9ee1b06b60e24f4164d968fe49
afab04d5a637c2bcc2f43bad822d2a7723d66486
eacaa9f4721e372609a2efe065791732d0fa2a195254a3be866a088706bb86cd

HTTP Headers

GET /RobinHerbots/Inputmask/5.x/dist/jquery.inputmask.js HTTP/1.1
Host: rawgit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 02 Dec 2022 17:38:06 GMT
content-type: application/javascript;charset=utf-8
x-content-type-options: nosniff
x-robots-tag: none
access-control-allow-origin: *
link: <https://rawgit.com/>; rel="sunset"; title="RawGit will soon shut down. Please stop using it."
sunset: Tue, 01 Oct 2019 00:00:00 GMT
etag: W/"c092be9023279f5797d3a25d2b2349b379f5b3adc4e0426f481895aeec181d5b"
cache-control: max-age=3600, s-maxage=300
vary: Accept-Encoding
rawgit-cache-status: EXPIRED
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FFR%2BcBYVD6CDfytwK2LP%2BFxNJvBhfExsqJX5pIsZnlfOj2XRXL3vnV1M6MzaD3lNky9OFU34WcIb2DmYYVm5mKODpiHRfO%2BKZUSmXw6cpDGYh3qzYvCd8sg7wzHV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; preload
server: cloudflare
cf-ray: 7735d5933eda0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

push.services.mozilla.com/

52.42.74.230

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.42.74.230:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3j001HP0kbrFR6Ir1o9G4g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: X2gFknvYarkBhFwYivr04PCqAxU=

app.nickel.eu/static/media/sketch-homepage.a14b9180.png

23.36.79.33

200 OK

198 kB

URL HTTP/1.1
app.nickel.eu/static/media/sketch-homepage.a14b9180.png
IP
23.36.79.33:0
ASN
#20940 Akamai International B.V.

File type
PNG image data, 2341 x 2090, 8-bit/color RGBA, non-interlaced\012- data
Size
198 kB (197851 bytes)
Hash
81b77ce16052163d40cb0665fc951f78
5b49fa09114237b29e1dee4cc9d4a64344f218d5
234a61d9c004512f92960323b0e8ea01bf7138f7e3daa22648f50000bec54301

HTTP Headers

GET /static/media/sketch-homepage.a14b9180.png HTTP/1.1
Host: app.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 197851
Last-Modified: Wed, 02 Nov 2022 13:55:29 GMT
ETag: "636276d1-304db"
Cache-Control: public
Accept-Ranges: bytes
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: espace-perso.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
X-Frame-Options: sameorigin
Date: Fri, 02 Dec 2022 17:38:06 GMT
Connection: keep-alive
Set-Cookie: Path=/; HttpOnly; Secure

static-resources.nickel.eu/fonts/MullerNarrow-Medium.woff2

23.36.79.33

200 OK

33 kB

URL HTTP/1.1
static-resources.nickel.eu/fonts/MullerNarrow-Medium.woff2
IP
23.36.79.33:0
ASN
#20940 Akamai International B.V.

File type
Web Open Font Format (Version 2), TrueType, length 33044, version 1.0\012- data
Size
33 kB (33044 bytes)
Hash
77f3505fab6d762778d600d08abafd4e
bbcda2aef9c080132da7cb01d2b3d46ed22fa31b
f996d7eb10768373376f60c455f38135808f5ad7d6a347aec0584362de092fa7

HTTP Headers

GET /fonts/MullerNarrow-Medium.woff2 HTTP/1.1
Host: static-resources.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nazilli.murategitim.com
Connection: keep-alive
Referer: https://nazilli.murategitim.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: font/woff2
Content-Length: 33044
Last-Modified: Wed, 01 Sep 2021 15:49:38 GMT
ETag: "612fa112-8114"
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: static-resources.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=15724800; includeSubDomains
Date: Fri, 02 Dec 2022 17:38:06 GMT
Connection: keep-alive

static-resources.nickel.eu/fonts/MullerNarrow-Light.woff2

23.36.79.33

200 OK

32 kB

URL HTTP/1.1
static-resources.nickel.eu/fonts/MullerNarrow-Light.woff2
IP
23.36.79.33:0
ASN
#20940 Akamai International B.V.

File type
Web Open Font Format (Version 2), TrueType, length 32024, version 1.0\012- data
Size
32 kB (32024 bytes)
Hash
8bfa4a94d58fb8a77071a090b39169cf
745bfa90223dafbe481748d1a6afbd54a3381612
f0e7fef75b97057f33e9ba884f068688dd6514ad2e303685ab29418e1390b842

HTTP Headers

GET /fonts/MullerNarrow-Light.woff2 HTTP/1.1
Host: static-resources.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nazilli.murategitim.com
Connection: keep-alive
Referer: https://nazilli.murategitim.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: font/woff2
Content-Length: 32024
Last-Modified: Wed, 01 Sep 2021 15:49:38 GMT
ETag: "612fa112-7d18"
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: static-resources.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=15724800; includeSubDomains
Date: Fri, 02 Dec 2022 17:38:06 GMT
Connection: keep-alive

static-resources.nickel.eu/fonts/MullerNarrow-ExtraBold.woff2

23.36.79.33

200 OK

31 kB

URL HTTP/1.1
static-resources.nickel.eu/fonts/MullerNarrow-ExtraBold.woff2
IP
23.36.79.33:0
ASN
#20940 Akamai International B.V.

File type
Web Open Font Format (Version 2), TrueType, length 30968, version 1.0\012- data
Size
31 kB (30968 bytes)
Hash
e1f0c316a274e4fb7df07d7594fffe32
cf17a7d2b83dc7cb990cc5ae6d366bbb488dca0c
e671416c9ac25a7877362f1c6581b91fbe987ec04e187b365a96a3feecc2bb1a

HTTP Headers

GET /fonts/MullerNarrow-ExtraBold.woff2 HTTP/1.1
Host: static-resources.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nazilli.murategitim.com
Connection: keep-alive
Referer: https://nazilli.murategitim.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: font/woff2
Content-Length: 30968
Last-Modified: Wed, 01 Sep 2021 15:49:38 GMT
ETag: "612fa112-78f8"
Cache-Control: no-store, no-cache, must-revalidate
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: static-resources.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=15724800; includeSubDomains
Date: Fri, 02 Dec 2022 17:38:06 GMT
Connection: keep-alive

app.nickel.eu//assets/icon-180.png

23.36.79.33

200 OK

1.0 kB

URL HTTP/1.1
app.nickel.eu//assets/icon-180.png
IP
23.36.79.33:0
ASN
#20940 Akamai International B.V.

File type
PNG image data, 180 x 180, 4-bit colormap, non-interlaced\012- data
Size
1.0 kB (1015 bytes)
Hash
d416fff9814455130769d44b4b28a573
f297b10be6553b6232e95dc9ae2cb4ffbad8682d
29b9e2818286eec748e2a09dd3171c725860c87420aa26c9b2c4da1416110dc0

HTTP Headers

GET //assets/icon-180.png HTTP/1.1
Host: app.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1015
Last-Modified: Wed, 02 Nov 2022 13:50:51 GMT
ETag: "636275bb-3f7"
Cache-Control: no-store, no-cache, must-revalidate
Accept-Ranges: bytes
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: espace-perso.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
X-Frame-Options: sameorigin
Date: Fri, 02 Dec 2022 17:38:06 GMT
Connection: keep-alive
Set-Cookie: Path=/; HttpOnly; Secure

app.nickel.eu/favicon.ico

23.36.79.33

200 OK

1.2 kB

URL HTTP/1.1
app.nickel.eu/favicon.ico
IP
23.36.79.33:0
ASN
#20940 Akamai International B.V.

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
b2e9188d1bbbfa02ca3fdb2729a899f1
16f7fd93bc0d607d545e444fb8753580ffa0bd59
60a3acb3e24d8255c5ed37cf3fcb147a8c7ab63b5c4e3a4ec81492ff819e3331

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: app.nickel.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nazilli.murategitim.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Wed, 02 Nov 2022 13:50:51 GMT
ETag: "636275bb-47e"
Cache-Control: no-store, no-cache, must-revalidate
Accept-Ranges: bytes
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: espace-perso.spartacus-frontend.svc.cluster.local:80/*
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: frame-ancestors 'self'
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
X-Frame-Options: sameorigin
Date: Fri, 02 Dec 2022 17:38:06 GMT
Connection: keep-alive
Set-Cookie: Path=/; HttpOnly; Secure

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8458
Expires: Fri, 02 Dec 2022 19:59:05 GMT
Date: Fri, 02 Dec 2022 17:38:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8458
Expires: Fri, 02 Dec 2022 19:59:05 GMT
Date: Fri, 02 Dec 2022 17:38:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8458
Expires: Fri, 02 Dec 2022 19:59:05 GMT
Date: Fri, 02 Dec 2022 17:38:07 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg

34.120.237.76

200 OK

6.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.2 kB (6174 bytes)
Hash
b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:00:48 GMT
age: 41839
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7591 bytes)
Hash
d147ccb10bda82b153a596c3c967cd6a
ffd0763f997e71a8c1458523fc17cafe8849dfdf
1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:51 GMT
age: 71356
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.8 kB (4834 bytes)
Hash
cd8ad22c2eb1eb91c76970fa449f1bc4
0de97f3a4964038222bd751e043e413113e6db9d
668f805815aede3bc04f8564bd6aefd56029362bb0aa8a794673eb78ab2d4643

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4834
x-amzn-requestid: 63a0b8b5-5cb3-4a1f-aa46-47c84abe726f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQrjEeAIAMF3sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7e3-0032799009f893ba79f314db;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 02EF3QEVKmEB2ikbGk9gzQq7_VMi00ufHUNRFTL8MpwJKaXQwdT8HA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 03:42:27 GMT
age: 50140
etag: "0de97f3a4964038222bd751e043e413113e6db9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.8 kB (4803 bytes)
Hash
cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 44272
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7732 bytes)
Hash
379a4a1b95d3aa3c5a4f8e7f9abb030f
d45dceb3dc58a07197aa5077582b5b1cd2ff791a
1b92dec5bf90beffbcd9060052b8788f08645dd4ba34219f7ddb2d40bbd2d151

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7732
x-amzn-requestid: 3781c2b7-082a-468a-a186-f7483494e749
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoEq3IAMFnKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-679fe9f905e07abf4e6a812c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FhCtGsjgnq83-zRNBH-y9BHUh2IRaN0ahO-BCUw7bTWU8jAanBqdlA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:53:35 GMT
age: 71072
etag: "d45dceb3dc58a07197aa5077582b5b1cd2ff791a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8863 bytes)
Hash
156e9ea97b774cbd8361072e4041b6c8
fc71ae3cae92ed6011904bb2367f23bf4e69fab4
58d953c19ebbbdfc3965bbe3f52308d4702deaf4d0c029f4674bcb862da138af

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 10:51:17 GMT
age: 24410
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (37)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size