urlquery - report: groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
cdnjs.cloudflare.com (1)	235	2015-04-17 20:46:33 UTC	2022-11-22 06:59:45 UTC	104.17.24.14
cts.tradepub.com (2)	303776	2018-06-13 19:11:41 UTC	2020-05-07 16:09:46 UTC	209.133.56.108
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
ocsp.globalsign.com (2)	2075	2012-07-20 17:46:16 UTC	2020-05-02 20:58:10 UTC	104.18.21.226
img.tradepub.com (5)	131572	2013-04-18 12:57:55 UTC	2020-04-15 04:51:44 UTC	205.234.175.175
groupitcontentcuration.com (13)	0	2022-07-07 20:13:55 UTC	2022-11-22 20:45:59 UTC	52.207.173.28	Unknown ranking
r3.o.lencr.org (8)	344	No data	No data	23.36.77.32
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	35.162.142.194
www.tradepub.com (1)	750480	2018-09-28 12:09:03 UTC	2020-04-18 21:43:41 UTC	209.133.56.117
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-22 05:47:51 UTC	34.102.187.140
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-22 05:40:51 UTC	34.117.237.239
polyfill.io (1)	102644	2016-02-12 00:04:58 UTC	2022-11-22 07:14:28 UTC	151.101.129.26
ocsp.netsolssl.com (1)	8381	2013-09-19 08:30:29 UTC	2020-04-08 20:55:49 UTC	172.64.155.188

Scan Date	Severity	Indicator	Comment
2022-11-22	2	groupitcontentcuration.com/lpScripts/assetsBehavior.js	Phishing
2022-11-22	2	groupitcontentcuration.com/lib/itbf/page.js	Phishing
2022-11-22	2	groupitcontentcuration.com/lib/itbf/customScripts/otherOption.js	Phishing
2022-11-22	2	groupitcontentcuration.com/lib/bs3/bootstrap.min.js	Phishing
2022-11-22	2	groupitcontentcuration.com/lib/jq/jq-3.5.1.min.js	Phishing
2022-11-22	2	groupitcontentcuration.com/lib/uri/uri.js	Phishing
2022-11-22	2	groupitcontentcuration.com/lpScripts/assetsBehavior.js	Phishing

Date	UQ / IDS / BL	URL	IP
2023-01-09 15:11:10 +0000	0 - 0 - 2	groupinsightscurated.com/	52.207.173.28
2023-01-06 05:58:26 +0000	0 - 0 - 4	techreportscuratedtips.com/20085-141678/unsub (...)	52.207.173.28
2022-12-26 04:00:14 +0000	0 - 0 - 2	curatedtechnologymedia.com/	52.207.173.28
2022-12-25 21:49:23 +0000	0 - 0 - 14	technologycuratedpromotion.com/19779-138116/7 (...)	52.207.173.28
2022-12-23 05:49:27 +0000	0 - 0 - 14	technologycuratedpromotion.com/19779-138116/7 (...)	52.207.173.28

Date	UQ / IDS / BL	URL	IP
2023-01-28 13:41:49 +0000	0 - 0 - 10	bc6745.ezepo.net/unsubscribe/654/37/3/db08c7f (...)	54.159.228.173
2023-01-28 13:41:05 +0000	0 - 8 - 0	d7d.uz/	174.129.25.170
2023-01-28 13:24:52 +0000	0 - 2 - 1	thundering-defiant-appeal.glitch.me/NFCUaccou (...)	34.231.87.196
2023-01-28 13:19:53 +0000	0 - 0 - 10	bc6745.ezepo.net/unsubscribe/654/37/3/db08c7f (...)	34.225.231.161
2023-01-28 13:16:46 +0000	0 - 0 - 2	35.169.5.110/	35.169.5.110

Date	UQ / IDS / BL	URL	IP
2022-11-22 21:45:16 +0000	0 - 0 - 7	groupitcontentcuration.com/18950-132037/73426 (...)	52.207.173.28
2022-09-28 20:38:21 +0000	0 - 0 - 3	groupitcontentcuration.com/17151-119166/65606 (...)	52.207.173.28

Request	Response
GET /18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: groupitcontentcuration.com/18950-132037/73426?uid=5V7ba (...) FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b 52.207.173.28 HTTP/1.1 301 Moved Permanently Content-Type: text/html Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:05 GMT Content-Length: 169 Connection: keep-alive Location: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 169 Md5: b51956ed2a6129f43c5d0ecc011cc5a5 Sha1: c03157aff80067b6b57903d3843b9fd9e07b33ab Sha256: 1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5" Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5990 Expires: Tue, 22 Nov 2022 23:24:55 GMT Date: Tue, 22 Nov 2022 21:45:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1456357aecbd23f21ad98da57e0127eb Sha1: 7074815b39fa8da9013883971d665e4c1b0797ea Sha256: f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3750 Cache-Control: 'max-age=158059' Date: Tue, 22 Nov 2022 21:45:05 GMT Last-Modified: Tue, 22 Nov 2022 20:42:35 GMT Server: ECS (ska/F711) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: b59d95402dfb464c176610284ba13f65 Sha1: 1a6c62fb0d48654dd204b66161bb03fefe60f71a Sha256: 40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634" Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=20317 Expires: Wed, 23 Nov 2022 03:23:42 GMT Date: Tue, 22 Nov 2022 21:45:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 054ff0d1a0a43f7cb1d78dbd34e27f99 Sha1: 3caf54f3de1d6a8c6f6454083f8b8e7dec77db54 Sha256: fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Tue, 22 Nov 2022 21:09:24 GMT cache-control: public,max-age=3600 age: 2141 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 567df7db606cf5d0871aa5bc9311b6da Sha1: 4263faac7cbab2fcaf6661911dcad5091c06be17 Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: MrLGM8hrwV5vo3icfxNzKiTYsdGaKxxyB+0ecKxdu3FTgOsaC1Rr1bVBje9J5wM49xZ1ppExVnA= x-amz-request-id: PV2G430MDXHE2RZR content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 22 Nov 2022 21:39:43 GMT age: 322 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Tue, 22 Nov 2022 21:45:06 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 83ef73fb0cece6a92fb1829d5ebfc14cdfc3a968b395489ce95202fd52bd9bfc 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "83EF73FB0CECE6A92FB1829D5EBFC14CDFC3A968B395489CE95202FD52BD9BFC" Last-Modified: Mon, 21 Nov 2022 13:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21581 Expires: Wed, 23 Nov 2022 03:44:47 GMT Date: Tue, 22 Nov 2022 21:45:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 0b9c4b6fd7a8442e3745bac0ec8fb6de Sha1: 1712116e9cf735f66caa9cf4d2ce81fce9343ec5 Sha256: 83ef73fb0cece6a92fb1829d5ebfc14cdfc3a968b395489ce95202fd52bd9bfc
GET /18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: groupitcontentcuration.com/18950-132037/73426?uid=5V7ba (...) FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 6aaa73207190e8bbb1918b2d339b1520c0e308457827fe79bb285d2c09635405 52.207.173.28 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx/1.22.0 Transfer-Encoding: chunked Connection: keep-alive X-Powered-By: PHP/7.4.16 Cache-Control: max-age=0, must-revalidate, private Date: Tue, 22 Nov 2022 21:45:06 GMT Expires: Tue, 22 Nov 2022 21:45:06 GMT Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (320) Size: 1757 Md5: 911f894a6f4a3042cccbf24c9f607bf3 Sha1: 371883571d6893e032eaa7eb7b38197ad558fa86 Sha256: 6aaa73207190e8bbb1918b2d339b1520c0e308457827fe79bb285d2c09635405
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Tue, 22 Nov 2022 21:08:53 GMT cache-control: public,max-age=3600 age: 2173 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /ajax/libs/jquery-validate/1.19.2/jquery.validate.min.js HTTP/1.1 Host: cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://groupitcontentcuration.com Connection: keep-alive Referer: https://groupitcontentcuration.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.19.2/j (...) FQDN: cdnjs.cloudflare.com IP: 104.17.24.14 HASH: 1e51fbddb76b932b540fcd5e6ec3bfdf3196f0bb5e1f441a05d7d62208606e73 104.17.24.14 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 date: Tue, 22 Nov 2022 21:45:06 GMT content-length: 6970 access-control-allow-origin: * cache-control: public, max-age=30672000 content-encoding: br etag: "5ed13e63-5f7b" last-modified: Fri, 29 May 2020 16:54:59 GMT cf-cdnjs-via: cfworker/kv cross-origin-resource-policy: cross-origin timing-allow-origin: * x-content-type-options: nosniff vary: Accept-Encoding cf-cache-status: HIT age: 1744294 expires: Sun, 12 Nov 2023 21:45:06 GMT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4NwYDM%2F0Q7wAvsPW%2BjiWRumVPpVJT0p3gwXwGTpraCaLBu17%2BUW6Y072IEs265OAm1%2FPvYYw9ELDi2YEbnGfgPf%2FYqupwuDfoNPDRTxtzvhow%2FeliStatzK%2FjlDiyQyCdZmPVHBu"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15780000 server: cloudflare cf-ray: 76e4d9a87bc40b65-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text, with very long lines (24304) Size: 6970 Md5: 4dff16256caf65b9530a221f15ed1661 Sha1: e253fdfafb73d51e9d8c1632a521bf562c3d0975 Sha256: 1e51fbddb76b932b540fcd5e6ec3bfdf3196f0bb5e1f441a05d7d62208606e73
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 6aa3d2763181cc48d2ad0ce7d227f3cb3324045c3f7858ccdbae675768dcec55 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1236 Cache-Control: 'max-age=158059' Date: Tue, 22 Nov 2022 21:45:06 GMT Last-Modified: Tue, 22 Nov 2022 21:24:30 GMT Server: ECS (ska/F711) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 8a181d95550cfdf3b1fc4deb71631e40 Sha1: 37866f7293c41fbfb817e321754cae5c5bf59f93 Sha256: 6aa3d2763181cc48d2ad0ce7d227f3cb3324045c3f7858ccdbae675768dcec55
GET /v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7 HTTP/1.1 Host: polyfill.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://groupitcontentcuration.com Connection: keep-alive Referer: https://groupitcontentcuration.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: polyfill.io/v3/polyfill.min.js?version=3.52.1&features= (...) FQDN: polyfill.io IP: 151.101.129.26 HASH: fe35c33df2fa5edeac1dbbe512a6e92c5b1e7fb5c204df818e23ea07b5121add 151.101.129.26 HTTP/2 200 OK content-type: text/javascript; charset=utf-8 cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800 last-modified: Fri, 18 Nov 2022 10:54:37 GMT content-encoding: br age: 0 accept-ranges: bytes useragent_normaliser: firefox/105.0.0 date: Tue, 22 Nov 2022 21:45:06 GMT access-control-allow-origin: * access-control-allow-methods: GET,HEAD,OPTIONS vary: User-Agent, Accept-Encoding server-timing: cache-bma1634, PASS, fastly;desc="Edge time";dur=12 content-length: 74 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 74 Md5: bdb6d8e9b581dfbdb87566776ede0cbd Sha1: d18cdeacd5c146b34919955e97e51b7db50d0d9b Sha256: fe35c33df2fa5edeac1dbbe512a6e92c5b1e7fb5c204df818e23ea07b5121add
GET /lib/itbf/style.css HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: groupitcontentcuration.com/lib/itbf/style.css FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 6b89575c78dca6bcba064e9641e4bbbd6d9829a724a9d9ccf1b8a6f1dc3a0c29 52.207.173.28 HTTP/1.1 200 OK Content-Type: text/css Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:06 GMT Content-Length: 2133 Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT Connection: keep-alive ETag: "6074ab5b-855" Expires: Tue, 22 Nov 2022 21:45:06 GMT Cache-Control: max-age=0 Access-Control-Allow-Origin: * Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text Size: 2133 Md5: 648686275ff597bad16490f363f9f085 Sha1: 7e252ec302b8551fb69519eb517723df2125db12 Sha256: 6b89575c78dca6bcba064e9641e4bbbd6d9829a724a9d9ccf1b8a6f1dc3a0c29
GET /lpScripts/assetsBehavior.js HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: groupitcontentcuration.com/lpScripts/assetsBehavior.js FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 01f6570da4691ac14aa5f882167414fa699581b41cacfa07f8f7731663392cd4 52.207.173.28 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:06 GMT Content-Length: 9493 Last-Modified: Fri, 07 Oct 2022 13:13:57 GMT Connection: keep-alive ETag: "63402615-2515" Expires: Tue, 22 Nov 2022 21:45:06 GMT Cache-Control: max-age=0 Access-Control-Allow-Origin: * Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text Size: 9493 Md5: b3d79c3fb1a09ffcead07bd732d7d81a Sha1: d73f923eea8f386c4d441a076e1e77e59f0f7cf4 Sha256: 01f6570da4691ac14aa5f882167414fa699581b41cacfa07f8f7731663392cd4 Alerts: Blocklists: - fortinet: Phishing
GET /lib/itbf/page.js HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: groupitcontentcuration.com/lib/itbf/page.js FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 73b8ec23d141fa549c55bb04af1efbd6bb923e5b5650cc6303a78e9083bc614e 52.207.173.28 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:06 GMT Content-Length: 64 Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT Connection: keep-alive ETag: "6074ab5b-40" Expires: Tue, 22 Nov 2022 21:45:06 GMT Cache-Control: max-age=0 Access-Control-Allow-Origin: * Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text Size: 64 Md5: d92feda1e0803db8dd470c03f1c9e2c9 Sha1: d74214a948b48629df0d556921ff2b22d131d65b Sha256: 73b8ec23d141fa549c55bb04af1efbd6bb923e5b5650cc6303a78e9083bc614e Alerts: Blocklists: - fortinet: Phishing
GET /lib/itbf/customScripts/otherOption.js HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: groupitcontentcuration.com/lib/itbf/customScripts/other (...) FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 88943dce849c72155c7c1adc47f8dc7aacc48a5fc8f422cb5aa7c76d1bcfe541 52.207.173.28 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:06 GMT Content-Length: 1330 Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT Connection: keep-alive ETag: "6074ab5b-532" Expires: Tue, 22 Nov 2022 21:45:06 GMT Cache-Control: max-age=0 Access-Control-Allow-Origin: * Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text Size: 1330 Md5: 076d9d924c71cf335e12a6834927093b Sha1: a0c238a2363ad77055999dd3f38946c642c40396 Sha256: 88943dce849c72155c7c1adc47f8dc7aacc48a5fc8f422cb5aa7c76d1bcfe541 Alerts: Blocklists: - fortinet: Phishing
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: a4F9g6i1ey0iyVwu7UKBHA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.162.142.194 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.162.142.194 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: ljcaf1lqHTjP1sq1y4bWVUpoEgI= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lib/bs3/bootstrap.min.css HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: groupitcontentcuration.com/lib/bs3/bootstrap.min.css FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87 52.207.173.28 HTTP/1.1 200 OK Content-Type: text/css Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:06 GMT Content-Length: 122540 Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT Connection: keep-alive ETag: "6074ab5b-1deac" Expires: Tue, 22 Nov 2022 21:45:06 GMT Cache-Control: max-age=0 Access-Control-Allow-Origin: * Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with very long lines (65371) Size: 122540 Md5: 5d5357cb3704e1f43a1f5bfed2aebf42 Sha1: 08df9a96752852f2cbd310c30facd934e348c2c5 Sha256: 31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87
GET /lib/bs3/bootstrap.min.js HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: groupitcontentcuration.com/lib/bs3/bootstrap.min.js FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327 52.207.173.28 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:06 GMT Content-Length: 36816 Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT Connection: keep-alive ETag: "6074ab5b-8fd0" Expires: Tue, 22 Nov 2022 21:45:06 GMT Cache-Control: max-age=0 Access-Control-Allow-Origin: * Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with very long lines (32034) Size: 36816 Md5: 4becdc9104623e891fbb9d38bba01be4 Sha1: 6c264e0e0026ab5ece49350c6a8812398e696cbb Sha256: 4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327 Alerts: Blocklists: - fortinet: Phishing
GET /lib/jq/jq-3.5.1.min.js HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: groupitcontentcuration.com/lib/jq/jq-3.5.1.min.js FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f 52.207.173.28 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:06 GMT Content-Length: 89475 Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT Connection: keep-alive ETag: "6074ab5b-15d83" Expires: Tue, 22 Nov 2022 21:45:06 GMT Cache-Control: max-age=0 Access-Control-Allow-Origin: * Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with very long lines (65451) Size: 89475 Md5: 12b69d0ae6c6f0c42942ae6da2896e84 Sha1: d2cc8d43ce1c854b1172e42b1209502ad563db83 Sha256: 6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f Alerts: Blocklists: - fortinet: Phishing
GET /lib/uri/uri.js HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: groupitcontentcuration.com/lib/uri/uri.js FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 96361c580499a6dd7afa83f352fb2a27c159a39daf794e2e6813514be8a8fbe9 52.207.173.28 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:06 GMT Content-Length: 76862 Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT Connection: keep-alive ETag: "6074ab5b-12c3e" Expires: Tue, 22 Nov 2022 21:45:06 GMT Cache-Control: max-age=0 Access-Control-Allow-Origin: * Accept-Ranges: bytes --- Additional Info --- Magic: Unicode text, UTF-8 text, with very long lines (1107) Size: 76862 Md5: 64437cd33e2fa1a40e6850ee6388639e Sha1: 809078716153b491c00852f366ca3f8d6e03df22 Sha256: 96361c580499a6dd7afa83f352fb2a27c159a39daf794e2e6813514be8a8fbe9 Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: ocsp.netsolssl.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.netsolssl.com/ FQDN: ocsp.netsolssl.com IP: 172.64.155.188 HASH: dc80bdf158585919c28f2914a7c6e02775a78393b0bad5bf1ede00936755194a 172.64.155.188 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 22 Nov 2022 21:45:07 GMT Content-Length: 472 Connection: keep-alive Last-Modified: Mon, 21 Nov 2022 06:01:55 GMT Expires: Mon, 28 Nov 2022 06:01:54 GMT Etag: "f51f3c90541c06d8e8cc0c28bae6d2b0c69bedcb" Cache-Control: max-age=461206,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb2 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 76e4d9abcb33b524-OSL --- Additional Info --- Magic: data Size: 472 Md5: 3eec5fcdd078be4ef1b5da8f83d11f1c Sha1: f51f3c90541c06d8e8cc0c28bae6d2b0c69bedcb Sha256: dc80bdf158585919c28f2914a7c6e02775a78393b0bad5bf1ede00936755194a
GET /data/tphpjs/itbrief.tphp.js HTTP/1.1 Host: www.tradepub.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.tradepub.com/data/tphpjs/itbrief.tphp.js FQDN: www.tradepub.com IP: 209.133.56.117 HASH: 7d2a5b9178eba3bc0da4c96b9e1f9aed2014b18eabb674bf46eb1af336bc7155 209.133.56.117 HTTP/1.1 200 OK Content-Type: application/x-javascript Date: Tue, 22 Nov 2022 21:45:07 GMT Server: Apache/2.2.3 (CentOS) Set-Cookie: Apache=209.133.56.236.1669153507309755; path=/; domain=.tradepub.com Last-Modified: Fri, 24 Mar 2017 00:28:41 GMT ETag: "d11da24e-275-54b6f134fc040" Accept-Ranges: bytes Content-Length: 629 nnCoection: close --- Additional Info --- Magic: ASCII text, with very long lines (628) Size: 629 Md5: 82ed4a316d32aa15a8ac9630844540e4 Sha1: 5154494d15f381893fb9a3d73f4e090740f3a549 Sha256: 7d2a5b9178eba3bc0da4c96b9e1f9aed2014b18eabb674bf46eb1af336bc7155
POST /gsrsaovsslca2018 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/gsrsaovsslca2018 FQDN: ocsp.globalsign.com IP: 104.18.21.226 HASH: 75555bbcbb659c266de18d572133aa66c441f767f615f7a3609c46819b7e096a 104.18.21.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 22 Nov 2022 21:45:07 GMT Content-Length: 1432 Connection: keep-alive Expires: Sat, 26 Nov 2022 19:40:20 GMT ETag: "41c38cd05c37db07fdd58577a0720df95a1761ec" Last-Modified: Tue, 22 Nov 2022 19:40:21 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 1547 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 76e4d9ad7fd8b512-OSL --- Additional Info --- Magic: data Size: 1432 Md5: bdec0cc9a217c56cae4baa29cf864833 Sha1: 41c38cd05c37db07fdd58577a0720df95a1761ec Sha256: 75555bbcbb659c266de18d572133aa66c441f767f615f7a3609c46819b7e096a
POST /gsrsaovsslca2018 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/gsrsaovsslca2018 FQDN: ocsp.globalsign.com IP: 104.18.21.226 HASH: 75555bbcbb659c266de18d572133aa66c441f767f615f7a3609c46819b7e096a 104.18.21.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Tue, 22 Nov 2022 21:45:07 GMT Content-Length: 1432 Connection: keep-alive Expires: Sat, 26 Nov 2022 19:40:20 GMT ETag: "41c38cd05c37db07fdd58577a0720df95a1761ec" Last-Modified: Tue, 22 Nov 2022 19:40:21 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 1547 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 76e4d9ad7f66b4f4-OSL --- Additional Info --- Magic: data Size: 1432 Md5: bdec0cc9a217c56cae4baa29cf864833 Sha1: 41c38cd05c37db07fdd58577a0720df95a1761ec Sha256: 75555bbcbb659c266de18d572133aa66c441f767f615f7a3609c46819b7e096a
GET /free/w_sale439/images/w_sale439.gif HTTP/1.1 Host: img.tradepub.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: img.tradepub.com/free/w_sale439/images/w_sale439.gif FQDN: img.tradepub.com IP: 205.234.175.175 HASH: c8812cdc250e7280a442007d9b5a1bde7962b2777681d7e25d72de0f1e9dece3 205.234.175.175 HTTP/2 200 OK content-type: image/gif date: Tue, 22 Nov 2022 21:45:07 GMT content-length: 2644 access-control-allow-origin: * x-cfhash: "58d28201424f17c2360c04e47d80f725" x-cff: B last-modified: Mon, 21 Nov 2022 20:05:26 GMT x-cf3: M cf4age: 0 x-cf-tsc: 1669139626 cf4ttl: 31536000.000 x-cf2: H accept-ranges: bytes server: CFS 0215 x-cf-reqid: 34b36ae300929d8ec02a716564b55560 x-cf1: 13644:fA.arn1:cf:cacheN.arn1-01:M X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 235 x 42\012- data Size: 2644 Md5: 58d28201424f17c2360c04e47d80f725 Sha1: f72283ca601527f73f6101eb27091c3234fbd878 Sha256: c8812cdc250e7280a442007d9b5a1bde7962b2777681d7e25d72de0f1e9dece3
GET /cts4/?ptnr=itbrief&tm=w_conflg1x3&hicat=&type=wp&key=&trk=TKU HTTP/1.1 Host: cts.tradepub.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cts.tradepub.com/cts4/?ptnr=itbrief&tm=w_conflg1x3&hica (...) FQDN: cts.tradepub.com IP: 209.133.56.108 HASH: a7beedfc2bcf6a692478a4e976e46c143793ef5cd00069200ccf8c2d9d11dcf1 209.133.56.108 HTTP/1.1 200 OK Content-Type: text/html Date: Tue, 22 Nov 2022 21:45:07 GMT Server: Apache Keep-Alive: timeout=15 Connection: Keep-Alive Transfer-Encoding: chunked --- Additional Info --- Magic: HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1912) Size: 1928 Md5: a0eebe33cb0f8d60128acc9be1ee4be0 Sha1: 752c25f6e506ccbdc10d8c0529181a6efa81f64f Sha256: a7beedfc2bcf6a692478a4e976e46c143793ef5cd00069200ccf8c2d9d11dcf1
GET /free/w_sale439/images/w_sale439c8.jpg HTTP/1.1 Host: img.tradepub.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: img.tradepub.com/free/w_sale439/images/w_sale439c8.jpg FQDN: img.tradepub.com IP: 205.234.175.175 HASH: 7033c664cf4ce092e678295acd7d595c75a0ff3c4de6c994008232d978ef653b 205.234.175.175 HTTP/2 200 OK content-type: image/jpeg date: Tue, 22 Nov 2022 21:45:07 GMT content-length: 132152 access-control-allow-origin: * x-cfhash: "a301fb7b1223416bf586cc21dd903d6e" x-cff: B last-modified: Mon, 14 Nov 2022 21:20:47 GMT x-cf3: H cf4age: 56601 x-cf-tsc: 1668923363 cf4ttl: 31536000.000 x-cf2: H accept-ranges: bytes server: CFS 0215 x-cf-reqid: 1150e946a37dfd29a29bbbf62a90765d x-cf1: 13644:fA.arn1:cf:cacheN.arn1-01:M X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1200x1555, components 3\012- data Size: 132152 Md5: a301fb7b1223416bf586cc21dd903d6e Sha1: 144ec498b85565ade156da71cbb2cc43e2ee8b97 Sha256: 7033c664cf4ce092e678295acd7d595c75a0ff3c4de6c994008232d978ef653b
GET /free/w_kryt01/images/w_kryt01c4.gif HTTP/1.1 Host: img.tradepub.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive	URL: img.tradepub.com/free/w_kryt01/images/w_kryt01c4.gif FQDN: img.tradepub.com IP: 205.234.175.175 HASH: bf893cf55764206e7b03f90442f832abba8e7f6c02c4f188d1d2ae015efe71e7 205.234.175.175 HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 22 Nov 2022 21:45:07 GMT Content-Length: 24374 Connection: keep-alive Access-Control-Allow-Origin: * X-CFHash: "a0bfa496d2102ec043d071db8d714f11" X-CFF: B Last-Modified: Tue, 21 Jun 2022 14:50:29 GMT X-CF3: M CF4Age: 0 x-cf-tsc: 1657649726 CF4ttl: 31536000.000 X-CF2: H Accept-Ranges: bytes Server: CFS 0215 X-CF-ReqID: aedd578428ebaee04ed622527405cf59 X-CF1: 13644:fA.arn1:cf:cacheN.arn1-01:M --- Additional Info --- Magic: GIF image data, version 89a, 200 x 259\012- data Size: 24374 Md5: a0bfa496d2102ec043d071db8d714f11 Sha1: 122c72c2828c315542048a2052f12d5ed3e06252 Sha256: bf893cf55764206e7b03f90442f832abba8e7f6c02c4f188d1d2ae015efe71e7
GET /free/w_regb03/images/w_regb03c4.gif HTTP/1.1 Host: img.tradepub.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive	URL: img.tradepub.com/free/w_regb03/images/w_regb03c4.gif FQDN: img.tradepub.com IP: 205.234.175.175 HASH: f9b2352022afd9689da7063f1c9d6fc46aecd5f374891e5d1b500fdf4c47444d 205.234.175.175 HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 22 Nov 2022 21:45:07 GMT Content-Length: 13817 Connection: keep-alive Access-Control-Allow-Origin: * X-CFHash: "4ff07087b917f1f34afcd86a13949ecf" X-CFF: B Last-Modified: Mon, 14 Nov 2022 14:52:18 GMT X-CF3: H CF4Age: 11445 x-cf-tsc: 1668450269 CF4ttl: 31536000.000 X-CF2: H Server: CFS 0215 X-CF-ReqID: f6412321538bc6ab3a8c3b40a3ece3c7 X-CF1: 13644:fA.arn1:cf:cacheN.arn1-01:H Accept-Ranges: bytes --- Additional Info --- Magic: GIF image data, version 89a, 200 x 259\012- data Size: 13817 Md5: 4ff07087b917f1f34afcd86a13949ecf Sha1: c4657dfe564642390ce293633b3f711e010ef236 Sha256: f9b2352022afd9689da7063f1c9d6fc46aecd5f374891e5d1b500fdf4c47444d
GET /free/w_coob43/images/w_coob43c4.gif HTTP/1.1 Host: img.tradepub.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive	URL: img.tradepub.com/free/w_coob43/images/w_coob43c4.gif FQDN: img.tradepub.com IP: 205.234.175.175 HASH: 7b4233d683ab3395648441601f7179def5c65150fe26b809f2d13048561680e4 205.234.175.175 HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 22 Nov 2022 21:45:07 GMT Content-Length: 40066 Connection: keep-alive Access-Control-Allow-Origin: * X-CFHash: "a701f72ccf785d89ae310846e68ed223" X-CFF: B Last-Modified: Thu, 01 Sep 2022 19:34:43 GMT X-CF3: H CF4Age: 312067 x-cf-tsc: 1662382185 CF4ttl: 31536000.000 X-CF2: H Accept-Ranges: bytes Server: CFS 0215 X-CF-ReqID: 07c2f80505235346b1f0bad09bddab8c X-CF1: 13644:fA.arn1:cf:cacheN.arn1-01:M --- Additional Info --- Magic: GIF image data, version 89a, 200 x 259\012- data Size: 40066 Md5: a701f72ccf785d89ae310846e68ed223 Sha1: ec48bb93f487c0a4e5f402363060468148d99519 Sha256: 7b4233d683ab3395648441601f7179def5c65150fe26b809f2d13048561680e4
GET /lpScripts/assetsBehavior.js HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin If-Modified-Since: Fri, 07 Oct 2022 13:13:57 GMT If-None-Match: "63402615-2515"	URL: groupitcontentcuration.com/lpScripts/assetsBehavior.js FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 52.207.173.28 HTTP/1.1 304 Not Modified Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:07 GMT Last-Modified: Fri, 07 Oct 2022 13:13:57 GMT Connection: keep-alive ETag: "63402615-2515" Expires: Tue, 22 Nov 2022 21:45:07 GMT Cache-Control: max-age=0 Access-Control-Allow-Origin: * --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - fortinet: Phishing
GET /lib/itbf/bg.jpg HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/lib/itbf/style.css Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: groupitcontentcuration.com/lib/itbf/bg.jpg FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: d6791c8426846097bfaf2a40143344656ba6875cce3feff1b46026320f3acd2a 52.207.173.28 HTTP/1.1 200 OK Content-Type: image/jpeg Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:07 GMT Content-Length: 237484 Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT Connection: keep-alive ETag: "6074ab5b-39fac" Expires: Tue, 22 Nov 2022 22:45:07 GMT Cache-Control: max-age=3600 Access-Control-Allow-Origin: * Accept-Ranges: bytes --- Additional Info --- Magic: JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2014:07:01 14:51:59], baseline, precision 8, 1366x768, components 3\012- data Size: 237484 Md5: 1dba0da5912b67751021b7569fc540c8 Sha1: cbd84515581c703faee04780d28c074617dbe10f Sha256: d6791c8426846097bfaf2a40143344656ba6875cce3feff1b46026320f3acd2a
GET /trk1/?ptnr=itbrief&tm=w_conflg1x3&type=w&cat=&key=&trk=TKU&p=w_kryt01,w_regb03,w_coob43 HTTP/1.1 Host: cts.tradepub.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive	URL: cts.tradepub.com/trk1/?ptnr=itbrief&tm=w_conflg1x3&type (...) FQDN: cts.tradepub.com IP: 209.133.56.108 HASH: 09d46019c7a75b96187202c3c8412182f27c413a9c3661857923dc8e94e91b7b 209.133.56.108 HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 22 Nov 2022 21:45:07 GMT Server: Apache pragma: no-cache content-length: 67 Keep-Alive: timeout=15 Connection: Keep-Alive --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 67 Md5: c2db45a8f494c4b40095f4fd38d613fd Sha1: 211639854b03d88502835b2649d42066016fa452 Sha256: 09d46019c7a75b96187202c3c8412182f27c413a9c3661857923dc8e94e91b7b
GET /favicon.ico HTTP/1.1 Host: groupitcontentcuration.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: groupitcontentcuration.com/favicon.ico FQDN: groupitcontentcuration.com IP: 52.207.173.28 HASH: 502322d8592de8395d6e7c2c37b18e04904e62d8f8b3caaa53858e4ebc64b692 52.207.173.28 HTTP/1.1 200 OK Content-Type: image/x-icon Server: nginx/1.22.0 Date: Tue, 22 Nov 2022 21:45:07 GMT Content-Length: 34494 Last-Modified: Wed, 14 Sep 2022 11:51:00 GMT Connection: keep-alive ETag: "6321c024-86be" Expires: Tue, 22 Nov 2022 22:45:07 GMT Cache-Control: max-age=3600 Accept-Ranges: bytes --- Additional Info --- Magic: MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\012- data Size: 34494 Md5: d4a95c780824be97bc45a187ab7ad24b Sha1: 53aeb2d44190d91ec2006379b3ddbd202b865d24 Sha256: 502322d8592de8395d6e7c2c37b18e04904e62d8f8b3caaa53858e4ebc64b692
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B" Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15297 Expires: Wed, 23 Nov 2022 02:00:05 GMT Date: Tue, 22 Nov 2022 21:45:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 804755c7e438531c9ba2e781947e1640 Sha1: 7a93c31638ee89a561bac2174482a5d12aa62d63 Sha256: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B" Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15297 Expires: Wed, 23 Nov 2022 02:00:05 GMT Date: Tue, 22 Nov 2022 21:45:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 804755c7e438531c9ba2e781947e1640 Sha1: 7a93c31638ee89a561bac2174482a5d12aa62d63 Sha256: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B" Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15297 Expires: Wed, 23 Nov 2022 02:00:05 GMT Date: Tue, 22 Nov 2022 21:45:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 804755c7e438531c9ba2e781947e1640 Sha1: 7a93c31638ee89a561bac2174482a5d12aa62d63 Sha256: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B" Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15297 Expires: Wed, 23 Nov 2022 02:00:05 GMT Date: Tue, 22 Nov 2022 21:45:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 804755c7e438531c9ba2e781947e1640 Sha1: 7a93c31638ee89a561bac2174482a5d12aa62d63 Sha256: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B" Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15297 Expires: Wed, 23 Nov 2022 02:00:05 GMT Date: Tue, 22 Nov 2022 21:45:08 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 804755c7e438531c9ba2e781947e1640 Sha1: 7a93c31638ee89a561bac2174482a5d12aa62d63 Sha256: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe35a8d1-e974-48d4-a8b7-1add4aa5d251.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: de326836a9de677438b9ae724198e94348b0900c62817ff10de3677ce93fdae0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8685 x-amzn-requestid: 66455cc7-83d7-4570-99f9-5fa838da947f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b-IrAHwKoAMFUHQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637bee46-354d65e9609bc05647556a5a;Sampled=0 x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:50 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: -9tZPsMl7i5hr0N1rwJdQBLiOImuEO12RDL0pcPNjf6t-LkRbPaN2A== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google date: Mon, 21 Nov 2022 22:02:46 GMT etag: "b8c928f93a8d82b48491448d811a95ad99dc6aef" age: 85342 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8685 Md5: 2ed6b76d15fc8d6295acdb6fb47461d3 Sha1: b8c928f93a8d82b48491448d811a95ad99dc6aef Sha256: de326836a9de677438b9ae724198e94348b0900c62817ff10de3677ce93fdae0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11249 x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bubSsHbZoAMFZNg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0 x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: iGM_HV13dzz5eOswbOJfjj14jlFW4jy2YsW7eJumS_TM5TxxG8VMwQ== via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google date: Tue, 22 Nov 2022 03:49:11 GMT age: 64557 etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11249 Md5: 481c033b9ffd030ff0de6e35cf788b47 Sha1: 85d3baad9217af2b5d75c019d2ef95dbb919a788 Sha256: 02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9029340f-28c3-4004-9012-9a24977dfd45.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7befcfbedac5652eb04bc675b67f7b642631d4e918f7aaee17b0b594e26854d0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6031 x-amzn-requestid: f59b04c5-4955-4847-9a7f-d9d53b47ca52 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b3cV0GC-oAMF5hA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637940f1-0425b3cf6a4650b60936feba;Sampled=0 x-amzn-remapped-date: Sat, 19 Nov 2022 20:47:45 GMT x-amz-cf-pop: SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: StZ9dxgY8W0WwUUqsxyeISFnbm_WGGcm_AMuo9dzfhF9Yp7wM0TMMg== via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google date: Tue, 22 Nov 2022 08:17:57 GMT age: 48431 etag: "56414a905340e1b1478a0a40a52b25365a724524" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6031 Md5: 4f3fad7453f45dfa617243c8beac64e1 Sha1: 56414a905340e1b1478a0a40a52b25365a724524 Sha256: 7befcfbedac5652eb04bc675b67f7b642631d4e918f7aaee17b0b594e26854d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e9c885a102dc811648cec4ac292db63564e81a48d7a3611cb31fba73b37286dd 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4639 x-amzn-requestid: 8a93fa29-158b-4402-aac4-85ad29a74ae1 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b-I6oELooAMFWFw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637beeaa-5a85509b26d9aeef7ae59b4c;Sampled=0 x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT x-amz-cf-pop: SEA19-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: Z_LKFsiB_s81UenxBOVg9_qX_7vBHUZix7XF8YguDCytRn5opLkLRA== via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google date: Mon, 21 Nov 2022 22:01:10 GMT age: 85438 etag: "12e2654db1f384bb04f5c5042848b25dda86b710" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4639 Md5: dafd9e17dc0023e71ae513c6025e4b80 Sha1: 12e2654db1f384bb04f5c5042848b25dda86b710 Sha256: e9c885a102dc811648cec4ac292db63564e81a48d7a3611cb31fba73b37286dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d50a0d2-05bc-4c0c-8961-2b8cc49ccc8f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f2a4c0829a4fb9a585113ed358832d16470ec391035a302a8f3c4666172f02bd 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10556 x-amzn-requestid: d2426c6d-5e78-496c-8649-0496a872b380 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b-Iq0GPVoAMF9bg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637bee45-1ee6dc09394731cc4dbfc38a;Sampled=0 x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:49 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: eHLf2DFK-3yN5dEG22XItPxRzmODRdThIYJI2oZqDJpgTGQGSQnGzQ== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google date: Mon, 21 Nov 2022 21:46:07 GMT age: 86341 etag: "bc4a2dc43898e3fb78ba7301d8b09b280991d221" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10556 Md5: 0ab62c5a7c3296600de924eb0b283bc1 Sha1: bc4a2dc43898e3fb78ba7301d8b09b280991d221 Sha256: f2a4c0829a4fb9a585113ed358832d16470ec391035a302a8f3c4666172f02bd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55f882f4-a410-42f1-919d-e59d9058875d.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e201f706ba38f04ef07d74a67eec187ad8b882027b96b0e4e700162f96da422f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7751 x-amzn-requestid: 577947ab-4fbe-4b07-944a-2b65cf5ed6d7 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b4UE9GJ9IAMFVtA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63799a1f-1a26961e20c88cd54a613ddb;Sampled=0 x-amzn-remapped-date: Sun, 20 Nov 2022 03:08:15 GMT x-amz-cf-pop: SEA19-C3 x-cache: Miss from cloudfront x-amz-cf-id: QB2RJo7NR7FMDRC7fC9eLMW99KR7andopIeu4qi0yp_tihE0vtpkXw== via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google date: Tue, 22 Nov 2022 03:41:51 GMT age: 64997 etag: "f3f2e5a8d14e009d0eaa3d7637730c4c525e3a9a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7751 Md5: 472ceca597feefba355fbd65998977b7 Sha1: f3f2e5a8d14e009d0eaa3d7637730c4c525e3a9a Sha256: e201f706ba38f04ef07d74a67eec187ad8b882027b96b0e4e700162f96da422f

                                        
                                            GET /18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf HTTP/1.1 

                                        
                                            
Host: groupitcontentcuration.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         52.207.173.28

                                        
                                            HTTP/1.1 301 Moved Permanently 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Server: nginx/1.22.0 

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:05 GMT 

                                        
                                            
Content-Length: 169 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Location: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

                                                Size:   169

                                                Md5:    b51956ed2a6129f43c5d0ecc011cc5a5

                                                Sha1:   c03157aff80067b6b57903d3843b9fd9e07b33ab

                                                Sha256: 1ac63374d015eee8d9d875502aa63981dbeb9d86a14096de0d504763808e429b

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 3750 

                                        
                                            
Cache-Control: 'max-age=158059' 

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:05 GMT 

                                        
                                            
Last-Modified: Tue, 22 Nov 2022 20:42:35 GMT 

                                        
                                            
Server: ECS (ska/F711) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    b59d95402dfb464c176610284ba13f65

                                                Sha1:   1a6c62fb0d48654dd204b66161bb03fefe60f71a

                                                Sha256: 40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Tue, 22 Nov 2022 21:09:24 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 2141 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    567df7db606cf5d0871aa5bc9311b6da

                                                Sha1:   4263faac7cbab2fcaf6661911dcad5091c06be17

                                                Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Tue, 22 Nov 2022 21:45:06 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf HTTP/1.1 

                                        
                                            
Host: groupitcontentcuration.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         52.207.173.28

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Server: nginx/1.22.0 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
X-Powered-By: PHP/7.4.16 

                                        
                                            
Cache-Control: max-age=0, must-revalidate, private 

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:06 GMT 

                                        
                                            
Expires: Tue, 22 Nov 2022 21:45:06 GMT 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (320)

                                                Size:   1757

                                                Md5:    911f894a6f4a3042cccbf24c9f607bf3

                                                Sha1:   371883571d6893e032eaa7eb7b38197ad558fa86

                                                Sha256: 6aaa73207190e8bbb1918b2d339b1520c0e308457827fe79bb285d2c09635405

                                        
                                            GET /ajax/libs/jquery-validate/1.19.2/jquery.validate.min.js HTTP/1.1 

                                        
                                            
Host: cdnjs.cloudflare.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://groupitcontentcuration.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://groupitcontentcuration.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         104.17.24.14

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=utf-8

                                        

                                        
                                            
date: Tue, 22 Nov 2022 21:45:06 GMT 

                                        
                                            
content-length: 6970 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
cache-control: public, max-age=30672000 

                                        
                                            
content-encoding: br 

                                        
                                            
etag: "5ed13e63-5f7b" 

                                        
                                            
last-modified: Fri, 29 May 2020 16:54:59 GMT 

                                        
                                            
cf-cdnjs-via: cfworker/kv 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 1744294 

                                        
                                            
expires: Sun, 12 Nov 2023 21:45:06 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4NwYDM%2F0Q7wAvsPW%2BjiWRumVPpVJT0p3gwXwGTpraCaLBu17%2BUW6Y072IEs265OAm1%2FPvYYw9ELDi2YEbnGfgPf%2FYqupwuDfoNPDRTxtzvhow%2FeliStatzK%2FjlDiyQyCdZmPVHBu"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
strict-transport-security: max-age=15780000 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 76e4d9a87bc40b65-OSL 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Unicode text, UTF-8 text, with very long lines (24304)

                                                Size:   6970

                                                Md5:    4dff16256caf65b9530a221f15ed1661

                                                Sha1:   e253fdfafb73d51e9d8c1632a521bf562c3d0975

                                                Sha256: 1e51fbddb76b932b540fcd5e6ec3bfdf3196f0bb5e1f441a05d7d62208606e73

                                        
                                            GET /v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7 HTTP/1.1 

                                        
                                            
Host: polyfill.io

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://groupitcontentcuration.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://groupitcontentcuration.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         151.101.129.26

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/javascript; charset=utf-8

                                        

                                        
                                            
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800 

                                        
                                            
last-modified: Fri, 18 Nov 2022 10:54:37 GMT 

                                        
                                            
content-encoding: br 

                                        
                                            
age: 0 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
useragent_normaliser: firefox/105.0.0 

                                        
                                            
date: Tue, 22 Nov 2022 21:45:06 GMT 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-allow-methods: GET,HEAD,OPTIONS 

                                        
                                            
vary: User-Agent, Accept-Encoding 

                                        
                                            
server-timing: cache-bma1634, PASS, fastly;desc="Edge time";dur=12 

                                        
                                            
content-length: 74 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   74

                                                Md5:    bdb6d8e9b581dfbdb87566776ede0cbd

                                                Sha1:   d18cdeacd5c146b34919955e97e51b7db50d0d9b

                                                Sha256: fe35c33df2fa5edeac1dbbe512a6e92c5b1e7fb5c204df818e23ea07b5121add

                                        
                                            GET /lib/bs3/bootstrap.min.css HTTP/1.1 

                                        
                                            
Host: groupitcontentcuration.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                         52.207.173.28

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Server: nginx/1.22.0 

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:06 GMT 

                                        
                                            
Content-Length: 122540 

                                        
                                            
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
ETag: "6074ab5b-1deac" 

                                        
                                            
Expires: Tue, 22 Nov 2022 21:45:06 GMT 

                                        
                                            
Cache-Control: max-age=0 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (65371)

                                                Size:   122540

                                                Md5:    5d5357cb3704e1f43a1f5bfed2aebf42

                                                Sha1:   08df9a96752852f2cbd310c30facd934e348c2c5

                                                Sha256: 31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.netsolssl.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         172.64.155.188

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:07 GMT 

                                        
                                            
Content-Length: 472 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Mon, 21 Nov 2022 06:01:55 GMT 

                                        
                                            
Expires: Mon, 28 Nov 2022 06:01:54 GMT 

                                        
                                            
Etag: "f51f3c90541c06d8e8cc0c28bae6d2b0c69bedcb" 

                                        
                                            
Cache-Control: max-age=461206,s-maxage=1800,public,no-transform,must-revalidate 

                                        
                                            
X-CCACDN-Proxy-ID: mcdpinlb2 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
CF-Cache-Status: DYNAMIC 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 76e4d9abcb33b524-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    3eec5fcdd078be4ef1b5da8f83d11f1c

                                                Sha1:   f51f3c90541c06d8e8cc0c28bae6d2b0c69bedcb

                                                Sha256: dc80bdf158585919c28f2914a7c6e02775a78393b0bad5bf1ede00936755194a

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 

                                        
                                            
Host: ocsp.globalsign.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 79 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         104.18.21.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:07 GMT 

                                        
                                            
Content-Length: 1432 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Expires: Sat, 26 Nov 2022 19:40:20 GMT 

                                        
                                            
ETag: "41c38cd05c37db07fdd58577a0720df95a1761ec" 

                                        
                                            
Last-Modified: Tue, 22 Nov 2022 19:40:21 GMT 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Age: 1547 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 76e4d9ad7fd8b512-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   1432

                                                Md5:    bdec0cc9a217c56cae4baa29cf864833

                                                Sha1:   41c38cd05c37db07fdd58577a0720df95a1761ec

                                                Sha256: 75555bbcbb659c266de18d572133aa66c441f767f615f7a3609c46819b7e096a

                                        
                                            GET /free/w_sale439/images/w_sale439.gif HTTP/1.1 

                                        
                                            
Host: img.tradepub.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://groupitcontentcuration.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         205.234.175.175

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
date: Tue, 22 Nov 2022 21:45:07 GMT 

                                        
                                            
content-length: 2644 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
x-cfhash: "58d28201424f17c2360c04e47d80f725" 

                                        
                                            
x-cff: B 

                                        
                                            
last-modified: Mon, 21 Nov 2022 20:05:26 GMT 

                                        
                                            
x-cf3: M 

                                        
                                            
cf4age: 0 

                                        
                                            
x-cf-tsc: 1669139626 

                                        
                                            
cf4ttl: 31536000.000 

                                        
                                            
x-cf2: H 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: CFS 0215 

                                        
                                            
x-cf-reqid: 34b36ae300929d8ec02a716564b55560 

                                        
                                            
x-cf1: 13644:fA.arn1:cf:cacheN.arn1-01:M 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 235 x 42\012- data

                                                Size:   2644

                                                Md5:    58d28201424f17c2360c04e47d80f725

                                                Sha1:   f72283ca601527f73f6101eb27091c3234fbd878

                                                Sha256: c8812cdc250e7280a442007d9b5a1bde7962b2777681d7e25d72de0f1e9dece3

                                        
                                            GET /free/w_sale439/images/w_sale439c8.jpg HTTP/1.1 

                                        
                                            
Host: img.tradepub.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://groupitcontentcuration.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         205.234.175.175

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
date: Tue, 22 Nov 2022 21:45:07 GMT 

                                        
                                            
content-length: 132152 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
x-cfhash: "a301fb7b1223416bf586cc21dd903d6e" 

                                        
                                            
x-cff: B 

                                        
                                            
last-modified: Mon, 14 Nov 2022 21:20:47 GMT 

                                        
                                            
x-cf3: H 

                                        
                                            
cf4age: 56601 

                                        
                                            
x-cf-tsc: 1668923363 

                                        
                                            
cf4ttl: 31536000.000 

                                        
                                            
x-cf2: H 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: CFS 0215 

                                        
                                            
x-cf-reqid: 1150e946a37dfd29a29bbbf62a90765d 

                                        
                                            
x-cf1: 13644:fA.arn1:cf:cacheN.arn1-01:M 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1200x1555, components 3\012- data

                                                Size:   132152

                                                Md5:    a301fb7b1223416bf586cc21dd903d6e

                                                Sha1:   144ec498b85565ade156da71cbb2cc43e2ee8b97

                                                Sha256: 7033c664cf4ce092e678295acd7d595c75a0ff3c4de6c994008232d978ef653b

                                        
                                            GET /free/w_regb03/images/w_regb03c4.gif HTTP/1.1 

                                        
                                            
Host: img.tradepub.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive

                                         205.234.175.175

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/gif

                                        

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:07 GMT 

                                        
                                            
Content-Length: 13817 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
X-CFHash: "4ff07087b917f1f34afcd86a13949ecf" 

                                        
                                            
X-CFF: B 

                                        
                                            
Last-Modified: Mon, 14 Nov 2022 14:52:18 GMT 

                                        
                                            
X-CF3: H 

                                        
                                            
CF4Age: 11445 

                                        
                                            
x-cf-tsc: 1668450269 

                                        
                                            
CF4ttl: 31536000.000 

                                        
                                            
X-CF2: H 

                                        
                                            
Server: CFS 0215 

                                        
                                            
X-CF-ReqID: f6412321538bc6ab3a8c3b40a3ece3c7 

                                        
                                            
X-CF1: 13644:fA.arn1:cf:cacheN.arn1-01:H 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 200 x 259\012- data

                                                Size:   13817

                                                Md5:    4ff07087b917f1f34afcd86a13949ecf

                                                Sha1:   c4657dfe564642390ce293633b3f711e010ef236

                                                Sha256: f9b2352022afd9689da7063f1c9d6fc46aecd5f374891e5d1b500fdf4c47444d

                                        
                                            GET /trk1/?ptnr=itbrief&tm=w_conflg1x3&type=w&cat=&key=&trk=TKU&p=w_kryt01,w_regb03,w_coob43 HTTP/1.1 

                                        
                                            
Host: cts.tradepub.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive

                                         209.133.56.108

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/gif

                                        

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:07 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
pragma: no-cache 

                                        
                                            
content-length: 67 

                                        
                                            
Keep-Alive: timeout=15 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   67

                                                Md5:    c2db45a8f494c4b40095f4fd38d613fd

                                                Sha1:   211639854b03d88502835b2649d42066016fa452

                                                Sha256: 09d46019c7a75b96187202c3c8412182f27c413a9c3661857923dc8e94e91b7b

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B" 

                                        
                                            
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=15297 

                                        
                                            
Expires: Wed, 23 Nov 2022 02:00:05 GMT 

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    804755c7e438531c9ba2e781947e1640

                                                Sha1:   7a93c31638ee89a561bac2174482a5d12aa62d63

                                                Sha256: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B" 

                                        
                                            
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=15297 

                                        
                                            
Expires: Wed, 23 Nov 2022 02:00:05 GMT 

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    804755c7e438531c9ba2e781947e1640

                                                Sha1:   7a93c31638ee89a561bac2174482a5d12aa62d63

                                                Sha256: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "AA6F123FED093048BD006BF5A0EA0A7B310D735436AF0CA07A06574F2026BA9B" 

                                        
                                            
Last-Modified: Sun, 20 Nov 2022 11:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=15297 

                                        
                                            
Expires: Wed, 23 Nov 2022 02:00:05 GMT 

                                        
                                            
Date: Tue, 22 Nov 2022 21:45:08 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    804755c7e438531c9ba2e781947e1640

                                                Sha1:   7a93c31638ee89a561bac2174482a5d12aa62d63

                                                Sha256: aa6f123fed093048bd006bf5a0ea0a7b310d735436af0ca07a06574f2026ba9b

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac98a873-8b46-43f5-9ac0-fc1cc1a0cd81.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 11249 

                                        
                                            
x-amzn-requestid: 65a3db77-b2e6-40b9-a776-021c2e9b56d0 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bubSsHbZoAMFZNg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6375a5aa-1286b97968cc2e4c7fe8ab29;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:26 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: iGM_HV13dzz5eOswbOJfjj14jlFW4jy2YsW7eJumS_TM5TxxG8VMwQ== 

                                        
                                            
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 22 Nov 2022 03:49:11 GMT 

                                        
                                            
age: 64557 

                                        
                                            
etag: "85d3baad9217af2b5d75c019d2ef95dbb919a788" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   11249

                                                Md5:    481c033b9ffd030ff0de6e35cf788b47

                                                Sha1:   85d3baad9217af2b5d75c019d2ef95dbb919a788

                                                Sha256: 02443c7869914c2b29892deb0c645395bcf4e8379da3cf20974614ff9c92893b

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4639 

                                        
                                            
x-amzn-requestid: 8a93fa29-158b-4402-aac4-85ad29a74ae1 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: b-I6oELooAMFWFw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-637beeaa-5a85509b26d9aeef7ae59b4c;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: Z_LKFsiB_s81UenxBOVg9_qX_7vBHUZix7XF8YguDCytRn5opLkLRA== 

                                        
                                            
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Mon, 21 Nov 2022 22:01:10 GMT 

                                        
                                            
age: 85438 

                                        
                                            
etag: "12e2654db1f384bb04f5c5042848b25dda86b710" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4639

                                                Md5:    dafd9e17dc0023e71ae513c6025e4b80

                                                Sha1:   12e2654db1f384bb04f5c5042848b25dda86b710

                                                Sha256: e9c885a102dc811648cec4ac292db63564e81a48d7a3611cb31fba73b37286dd

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55f882f4-a410-42f1-919d-e59d9058875d.webp HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7751 

                                        
                                            
x-amzn-requestid: 577947ab-4fbe-4b07-944a-2b65cf5ed6d7 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: b4UE9GJ9IAMFVtA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63799a1f-1a26961e20c88cd54a613ddb;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 20 Nov 2022 03:08:15 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C3 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: QB2RJo7NR7FMDRC7fC9eLMW99KR7andopIeu4qi0yp_tihE0vtpkXw== 

                                        
                                            
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Tue, 22 Nov 2022 03:41:51 GMT 

                                        
                                            
age: 64997 

                                        
                                            
etag: "f3f2e5a8d14e009d0eaa3d7637730c4c525e3a9a" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7751

                                                Md5:    472ceca597feefba355fbd65998977b7

                                                Sha1:   f3f2e5a8d14e009d0eaa3d7637730c4c525e3a9a

                                                Sha256: e201f706ba38f04ef07d74a67eec187ad8b882027b96b0e4e700162f96da422f

URL	groupitcontentcuration.com/18950-132037/73426?uid=5V7bakCseYFSdgrJzsWib2DLotL4YJAPuQ&prom_type=regular&prom_id=196024&pld=26L81sNgpwNGbf
IP	52.207.173.28 (United States)
ASN	#14618 AMAZON-AES
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-22 21:45:16 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	7
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (15)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.207.173.28

Last 5 reports on ASN: AMAZON-AES

Last 2 reports on domain: groupitcontentcuration.com

No other reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (1)

#1 JavaScript::Write (size: 1887) - SHA256: 0fa1a1be2f4e200cd4f3d56dd48362bcb964af1805cee8c37ad323f630b4464b

HTTP Transactions (47)

Overview

Domain Summary (15)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 52.207.173.28

Last 5 reports on ASN: AMAZON-AES

Last 2 reports on domain: groupitcontentcuration.com

No other reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (1)

#1 JavaScript::Write (size: 1887) - SHA256: 0fa1a1be2f4e200cd4f3d56dd48362bcb964af1805cee8c37ad323f630b4464b

HTTP Transactions (47)

Network Intrusion Detection Systems