3.16.104.124/admin/
302 Found 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/ HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Sat, 26 Nov 2022 03:56:26 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
X-Powered-By: PHP/5.6.40
Location: config.php
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5154
Expires: Sat, 26 Nov 2022 05:22:21 GMT
Date: Sat, 26 Nov 2022 03:56:27 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 798
Cache-Control: max-age=110885
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:56:27 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 10:44:32 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7382
Expires: Sat, 26 Nov 2022 05:59:29 GMT
Date: Sat, 26 Nov 2022 03:56:27 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 03:17:29 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2338
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4GFqsKjazpvshztRcydohYGXaQPR0ojA6rpFE/fo63N8w0bi/A+D1FoPNC+lUtLnkwVlwUSQ9sw=
x-amz-request-id: 8H4FCJP3Z5QTYEHC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 03:41:03 GMT
age: 924
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 03:56:27 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
3.16.104.124/admin/config.php
200 OK 9.9 kB URL HTTP/1.1 3.16.104.124/admin/config.php
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2128)
Hash f0402b1b81dd6eb10852ba9da59b2e55
f6c3ad19cd543c9255c3ce53132597a9fcfe40b7
eea850eeb493e26dc0d99fe2e60bbfc4878df16a5d265f647d5c824d9ee60ac5
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/config.php HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
X-Powered-By: PHP/5.6.40
Last-Modified: Sat, 26 Nov 2022 03:56:27 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
Set-Cookie: PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06; expires=Mon, 26-Dec-2022 03:56:27 GMT; Max-Age=2592000; path=/
lang=en_US
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
3.16.104.124/admin/assets/css/bootstrap-table-dev.css?load_version=14.0.16.11
200 OK 7.2 kB URL HTTP/1.1 3.16.104.124/admin/assets/css/bootstrap-table-dev.css?load_version=14.0.16.11
IP
File type ASCII text, with very long lines (321)
Hash 99f64500519ab6c5a1cf315fe3aebf22
1c753c10393599ba62b0ef36d7be9571ecf8bb00
01ff6e84d148ff8ddde8a6ad69ff07120f74cb3c4b00349df8a683b4d49252ed
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/css/bootstrap-table-dev.css?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "1c42-5ee2579197c8d"
Accept-Ranges: bytes
Content-Length: 7234
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
3.16.104.124/admin/assets/css/bootstrap-table-reorder-rows.css?load_version=14.0.16.11
200 OK 819 B URL HTTP/1.1 3.16.104.124/admin/assets/css/bootstrap-table-reorder-rows.css?load_version=14.0.16.11
IP
Hash 8e7bfc5c9662ecb96c85ca3d66cce446
7f9dd8bde965e8689dbec2f46620ef8060ce5b70
8780b1253ffa1308d9c2e1c031d68b6348d307009421f3399c9d636da9353b63
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/css/bootstrap-table-reorder-rows.css?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "333-5ee2579196cee"
Accept-Ranges: bytes
Content-Length: 819
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
3.16.104.124/admin/assets/css/typehead.js-bootstrap3-0.2.3.css?load_version=14.0.16.11
200 OK 6.5 kB URL HTTP/1.1 3.16.104.124/admin/assets/css/typehead.js-bootstrap3-0.2.3.css?load_version=14.0.16.11
IP
Hash a2913fa024d1b1d21828023780812afc
509a9f4a99372b1d2d698bcb6847393526ef38ef
ee1dcaaab6daa91a9fe2653018392e192c995f1121b4ba0ca63193716f6f2998
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/css/typehead.js-bootstrap3-0.2.3.css?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "1992-5ee2579197c8d"
Accept-Ranges: bytes
Content-Length: 6546
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
3.16.104.124/admin/assets/css/font-awesome.min-4.7.0.css?load_version=14.0.16.11
200 OK 31 kB URL HTTP/1.1 3.16.104.124/admin/assets/css/font-awesome.min-4.7.0.css?load_version=14.0.16.11
IP
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/css/font-awesome.min-4.7.0.css?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "7918-5ee2579198845"
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
3.16.104.124/admin/assets/css/bootstrap-3.3.7.min.css?load_version=14.0.16.11
200 OK 122 kB URL HTTP/1.1 3.16.104.124/admin/assets/css/bootstrap-3.3.7.min.css?load_version=14.0.16.11
IP
File type ASCII text, with very long lines (64985)
Size 122 kB (122201 bytes)
Hash d08ae405994f6ef8ab1ff7a5f156df5a
e108e8827cc092c089ff1949a9bf4d9d74f377e8
b08bad013d6e0174f59811273ddf7eb1c0d5a9c0dabbad5c03f35622b42383d4
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/css/bootstrap-3.3.7.min.css?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "1dd59-5ee2579196cee"
Accept-Ranges: bytes
Content-Length: 122201
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
3.16.104.124/admin/assets/css/notie.css?load_version=14.0.16.11
200 OK 5.0 kB URL HTTP/1.1 3.16.104.124/admin/assets/css/notie.css?load_version=14.0.16.11
IP
File type ASCII text, with very long lines (316)
Hash ab7f9f11f5c1ddf68aa8ff9e4f1e867b
6b4200af0249e4d49f37fc8eb5ff5c1c4c2207c0
119d1dd9f1abbe035e440afcb626a194144eb9edd3223b7ccc456606f20deaac
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/css/notie.css?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "135c-5ee2579197c8d"
Accept-Ranges: bytes
Content-Length: 4956
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
3.16.104.124/admin/assets/css/outdatedbrowser.min.css?load_version=14.0.16.11
200 OK 1.1 kB URL HTTP/1.1 3.16.104.124/admin/assets/css/outdatedbrowser.min.css?load_version=14.0.16.11
IP
File type ASCII text, with very long lines (796)
Hash b5ba9067df46093f5dd441fdb8770aa4
f08a69bd39b7137e88938f2b36d7fd7caa3c9c37
2e3a0f0237ffcb0a21e91f9f5c498ec70e3491a76ccd7eeb60f2e7acc0ac25f3
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/css/outdatedbrowser.min.css?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "42a-5ee2579196906"
Accept-Ranges: bytes
Content-Length: 1066
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 03:08:53 GMT
cache-control: public,max-age=3600
age: 2854
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
3.16.104.124/admin/assets/js/outdatedbrowser-1.1.3.min.js?load_version=14.0.16.11
200 OK 3.2 kB URL HTTP/1.1 3.16.104.124/admin/assets/js/outdatedbrowser-1.1.3.min.js?load_version=14.0.16.11
IP
File type HTML document, ASCII text, with very long lines (2902)
Hash cab9b82b8dd2f0a74c2e84b835335694
540a4fab454c0bf2bab23554605bbeb8ec5116a3
b8af39f942dfc8e759002ff1c50cebd02265428df2a2008bf89890ed7d696447
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/js/outdatedbrowser-1.1.3.min.js?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "c68-5ee257919de34"
Accept-Ranges: bytes
Content-Length: 3176
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
3.16.104.124/admin/assets/js/selector-set-1.1.0.js?load_version=14.0.16.11
200 OK 11 kB URL HTTP/1.1 3.16.104.124/admin/assets/js/selector-set-1.1.0.js?load_version=14.0.16.11
IP
Hash 1fd5e8e5e83277f72a21080f1fa6e47b
56b8f56a8cc6699c3d5fba856a43f74e3eb06adb
eb4bfe7a494eb9ab67d10e352a6b217ba8ffa58eefc04b2e6156a56428260df8
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/js/selector-set-1.1.0.js?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "2c69-5ee257919e604"
Accept-Ranges: bytes
Content-Length: 11369
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
3.16.104.124/admin/assets/js/jquery-3.1.1.min.js?load_version=14.0.16.11
200 OK 87 kB URL HTTP/1.1 3.16.104.124/admin/assets/js/jquery-3.1.1.min.js?load_version=14.0.16.11
IP
File type ASCII text, with very long lines (32030)
Hash e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/js/jquery-3.1.1.min.js?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "152b5-5ee257919bb0d"
Accept-Ranges: bytes
Content-Length: 86709
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
3.16.104.124/admin/assets/css/jquery-ui-1.10.3.custom.css?load_version=14.0.16.11
200 OK 60 kB URL HTTP/1.1 3.16.104.124/admin/assets/css/jquery-ui-1.10.3.custom.css?load_version=14.0.16.11
IP
File type ASCII text, with very long lines (303)
Hash f2ca4e2dfe80675c018d656c1506d80a
2bea9b775f09f2e3d7ea03d45d55a5ee691ff3a9
6fabd4c6963700f59070da19e981f41389aded52837d320a10d8c2cd1a650469
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/css/jquery-ui-1.10.3.custom.css?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "e96c-5ee2579197c8d"
Accept-Ranges: bytes
Content-Length: 59756
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
3.16.104.124/admin/assets/js/jquery.selector-set-0.2.2.js?load_version=14.0.16.11
200 OK 4.3 kB URL HTTP/1.1 3.16.104.124/admin/assets/js/jquery.selector-set-0.2.2.js?load_version=14.0.16.11
IP
Hash 8ee5502735139db62e25af880418ac0d
1aa3bc0fc813e230936ded921ec2b50d43b50ca8
e3bf5a6e5286643128c0e747932b0bfb85f7d96d055aab7140f166fa0889f939
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/js/jquery.selector-set-0.2.2.js?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "10e6-5ee257919b725"
Accept-Ranges: bytes
Content-Length: 4326
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
3.16.104.124/admin/assets/js/class.js?load_version=14.0.16.11
200 OK 2.1 kB URL HTTP/1.1 3.16.104.124/admin/assets/js/class.js?load_version=14.0.16.11
IP
Hash 5fd2357bca31aba76a1c7e6543fd9b72
eaeeecf8dafbcf144db033b6d2d8fe77f955342d
7465d4d767a4f82cace78aa4696064ca7a30f41ba7a195c16d3f7ceb5770517a
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/js/class.js?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "81c-5ee257919de34"
Accept-Ranges: bytes
Content-Length: 2076
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
3.16.104.124/admin/assets/less/cache/lessphp_dcb59374eedc5711cd2f4cc7e3318df7cb3cf950.css
200 OK 90 kB URL HTTP/1.1 3.16.104.124/admin/assets/less/cache/lessphp_dcb59374eedc5711cd2f4cc7e3318df7cb3cf950.css
IP
File type ASCII text, with very long lines (53040)
Hash fc893230f2b3ec5b512ed6376047fb05
837d57a7844789575e754cc3559b7a4fd6d90338
ecba8b86dbb33da3d496cbef6295ba9747343a85dfb990557e07d69d3f3b6ef8
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/less/cache/lessphp_dcb59374eedc5711cd2f4cc7e3318df7cb3cf950.css HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:43 GMT
ETag: "15fd0-5ee25797e4c37"
Accept-Ranges: bytes
Content-Length: 90064
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
3.16.104.124/admin/assets/js/modgettext.js?load_version=14.0.16.11
200 OK 2.3 kB URL HTTP/1.1 3.16.104.124/admin/assets/js/modgettext.js?load_version=14.0.16.11
IP
Hash 46c4154391fe9b5206739e74c49603a3
4c09d79742d8cdf267fd6e2c7bb9bbbf3012b862
81c520aeaa2495b4677192a32459092cc424e5c3a4a931c46882cfdd0776e4c1
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/js/modgettext.js?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "8e9-5ee257919bb0d"
Accept-Ranges: bytes
Content-Length: 2281
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
3.16.104.124/admin/assets/js/FreePBX.js?load_version=14.0.16.11
200 OK 833 B URL HTTP/1.1 3.16.104.124/admin/assets/js/FreePBX.js?load_version=14.0.16.11
IP
Hash 43a805ade21498645a464229b485716c
7ec0c3b047c4d023c88c0b4265f33adc1f74de8d
9a5199a3c386590a1c823318a758f76bae6e61a8627dd68f16a2186288caf1fb
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/js/FreePBX.js?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "341-5ee257919e9ec"
Accept-Ranges: bytes
Content-Length: 833
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
3.16.104.124/admin/assets/js/views/login.js
200 OK 183 B URL HTTP/1.1 3.16.104.124/admin/assets/js/views/login.js
IP
Hash 2bf2d555a43230e4f81bd7d7b0980d6c
d3151f69fc39a04e5c5c6590e10e8a51803c0418
43b9c183d02fdd3bce9406f568ea8c6ed45c95852173b01ae234b9c4a91f7f9e
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/js/views/login.js HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "b7-5ee257919e21c"
Accept-Ranges: bytes
Content-Length: 183
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
3.16.104.124/admin/assets/js/jed-1.1.1.js?load_version=14.0.16.11
200 OK 37 kB URL HTTP/1.1 3.16.104.124/admin/assets/js/jed-1.1.1.js?load_version=14.0.16.11
IP
File type C source, ASCII text, with very long lines (2360)
Hash 13b7f2a0cc9f5d369b140d76865faff5
91fcd2e48ccfc287a43b2ed0d303d70b1c565c19
05c5ebec6d6d52adadefebe6a6c787dd4d942be61ef9c63ddc74379642e10ff2
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/js/jed-1.1.1.js?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:27 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "9178-5ee257919b33d"
Accept-Ranges: bytes
Content-Length: 37240
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.digicert.com/
200 OK 471 B IP
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3881
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:56:28 GMT
Last-Modified: Sat, 26 Nov 2022 02:51:47 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
3.16.104.124/admin/images/freepbx_small.png?load_version=14.0.16.11
200 OK 2.9 kB URL HTTP/1.1 3.16.104.124/admin/images/freepbx_small.png?load_version=14.0.16.11
IP
File type PNG image data, 185 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash fab5de698f2272d31b5607328b7b0085
bc6e7d576ceca1c5fc74e573130754467d919e31
1eedaaedcf9d74ca44629eb74f28d6b8b321a0127ac6466fe39823b3ce9c8ee8
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/images/freepbx_small.png?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:37 GMT
ETag: "b55-5ee2579244a14"
Accept-Ranges: bytes
Content-Length: 2901
Cache-Control: max-age=31536000
Expires: Sun, 26 Nov 2023 03:56:28 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
3.16.104.124/admin/images/sangoma-horizontal_thumb.png
200 OK 2.1 kB URL HTTP/1.1 3.16.104.124/admin/images/sangoma-horizontal_thumb.png
IP
File type PNG image data, 185 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 0c72de6f844d131bacadd56042a59d76
56062548e9c69967c42e31734725a464a7cb8eb1
4cb1ae890ee9477262665397b083fcbd72a2fe05099b5c0cae2517baa4abf2af
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/images/sangoma-horizontal_thumb.png HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:37 GMT
ETag: "807-5ee257924462c"
Accept-Ranges: bytes
Content-Length: 2055
Cache-Control: max-age=31536000
Expires: Sun, 26 Nov 2023 03:56:28 GMT
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
3.16.104.124/admin/images/tango.png
200 OK 5.6 kB URL HTTP/1.1 3.16.104.124/admin/images/tango.png
IP
File type PNG image data, 65 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e98d85f530bfb7e28a0b580b2952ff6
f8f0ddadedb2fa15bd129e7c4c9ead729123c319
2acaf160073cd155de2d660a9977a8e20d725f3ce488de915c1aa7d1906af4f6
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/images/tango.png HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:37 GMT
ETag: "15eb-5ee2579244244"
Accept-Ranges: bytes
Content-Length: 5611
Cache-Control: max-age=31536000
Expires: Sun, 26 Nov 2023 03:56:28 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
3.16.104.124/admin/assets/images/user-control.png
200 OK 105 kB URL HTTP/1.1 3.16.104.124/admin/assets/images/user-control.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Size 105 kB (104685 bytes)
Hash 4e374b971c545d85d4e3e64c1b3eb8f8
38f76d811536e78997da9cca77bf29937187e1f5
952c8769d1496f8493d607d7f17abbd3e60d73f416beeba0d35b8dd90e2b299e
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/images/user-control.png HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "198ed-5ee25791993fd"
Accept-Ranges: bytes
Content-Length: 104685
Cache-Control: max-age=31536000
Expires: Sun, 26 Nov 2023 03:56:28 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
3.16.104.124/admin/assets/fonts/opensans-regular-webfont.woff2
200 OK 51 kB URL HTTP/1.1 3.16.104.124/admin/assets/fonts/opensans-regular-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 50876, version 1.6554\012- data
Hash 49606f401674c4ff542aa449486059f1
15a664027c7afa7a46f58959b5cc211d9ffa7090
332b119a48968af4dd02a2648590975fca2ae3092f9cefb36e29e92843dbf110
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/fonts/opensans-regular-webfont.woff2 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://3.16.104.124/admin/assets/less/cache/lessphp_dcb59374eedc5711cd2f4cc7e3318df7cb3cf950.css
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "c6bc-5ee257919a39d"
Accept-Ranges: bytes
Content-Length: 50876
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
3.16.104.124/admin/assets/fonts/opensans-bold-webfont.woff2
200 OK 53 kB URL HTTP/1.1 3.16.104.124/admin/assets/fonts/opensans-bold-webfont.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 52788, version 1.6554\012- data
Hash 1fcba93e9986e383be4ea3b9a5bd72c0
7cb5be906c041819151628026b187de0533ebb72
12607e981b1f89f9c0ccb527bad4585794ff7ea2c209b1221227e84562ba5ab2
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/fonts/opensans-bold-webfont.woff2 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://3.16.104.124/admin/assets/less/cache/lessphp_dcb59374eedc5711cd2f4cc7e3318df7cb3cf950.css
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "ce34-5ee2579199fb5"
Accept-Ranges: bytes
Content-Length: 52788
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
3.16.104.124/admin/assets/images/sys-admin.png
200 OK 105 kB URL HTTP/1.1 3.16.104.124/admin/assets/images/sys-admin.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Size 105 kB (104685 bytes)
Hash 00b0080f4d4459082c74a59c7e06afce
38341b50439e4ebbb6176e656cae7f3e35ab9e88
f598da8ebc57584e181466cb403a9388da12d8b64d407c9e037868044f20daee
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/images/sys-admin.png HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "198ed-5ee25791997e5"
Accept-Ranges: bytes
Content-Length: 104685
Cache-Control: max-age=31536000
Expires: Sun, 26 Nov 2023 03:56:28 GMT
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0RjKp4myPUSya0jk6Mf6Vw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sxJObNQiev2OEf35xhPhQjOM+GQ=
3.16.104.124/admin/assets/js/pbxlib_a1fe8fb5804364f4aa5b3718e2fef39bcbb9c180.js?load_version=14.0.16.11
200 OK 1.2 MB URL HTTP/1.1 3.16.104.124/admin/assets/js/pbxlib_a1fe8fb5804364f4aa5b3718e2fef39bcbb9c180.js?load_version=14.0.16.11
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 1.2 MB (1172329 bytes)
Hash 93e69b6760c533ba3272e8c44f5aa474
8f7114342d4b12b8513be126b84f2d98234de9ab
722bb1eb1b956244912f96e6d9c545e82abe7c9a04f5a9b05c1a4ae22aa19770
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/js/pbxlib_a1fe8fb5804364f4aa5b3718e2fef39bcbb9c180.js?load_version=14.0.16.11 HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Tue, 22 Jun 2021 14:26:34 GMT
ETag: "11e369-5c55b93af97bb"
Accept-Ranges: bytes
Content-Length: 1172329
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
3.16.104.124/admin/assets/images/support.png
200 OK 105 kB URL HTTP/1.1 3.16.104.124/admin/assets/images/support.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Size 105 kB (104685 bytes)
Hash d979de16d026ae437485c49be249bb41
96104700240dc9b9033dfe929c5abe4a5e440a17
49d1da6adc5b8ed679d20242bd8b297c6959f4e2b9104f86206ddc4fff27c687
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/images/support.png HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:36 GMT
ETag: "198ed-5ee2579199bcd"
Accept-Ranges: bytes
Content-Length: 104685
Cache-Control: max-age=31536000
Expires: Sun, 26 Nov 2023 03:56:28 GMT
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3.16.104.124/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Sat, 26 Nov 2022 02:22:56 GMT
Expires: Sat, 26 Nov 2022 04:22:56 GMT
Cache-Control: public, max-age=7200
Age: 5612
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
3.16.104.124/admin/images/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 3.16.104.124/admin/images/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 1d55fbad73a0eab94579e0a0acee62e7
82f652f301844bec254f46066b288f819a489a69
dfc3cc989bec09d968e978cde336709c655fa85469fd482ac10e17942da80be9
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/images/favicon.ico HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Wed, 23 Nov 2022 16:06:37 GMT
ETag: "47e-5ee2579244244"
Accept-Ranges: bytes
Content-Length: 1150
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
3.16.104.124/admin/assets/images/badge.png
404 Not Found 227 B URL HTTP/1.1 3.16.104.124/admin/assets/images/badge.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 35f2b46c83f4f5b30f65425baf4142e8
7e246402e19e3a00351fd67e412b1522665cbf9b
690e6fec12f09e3605eefb7653e9bd829f6e4759e8078a74853a7a62600c2b8f
Analyzer Verdict Alert quad9 Sinkholed
GET /admin/assets/images/badge.png HTTP/1.1
Host: 3.16.104.124
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://3.16.104.124/admin/config.php
Connection: keep-alive
Cookie: lang=en_US; PHPSESSID=hp8ec88im3qvqc4hsbqk31pd06
HTTP/1.1 404 Not Found
Date: Sat, 26 Nov 2022 03:56:28 GMT
Server: Apache/2.4.6 (Sangoma) OpenSSL/1.0.2k-fips PHP/5.6.40
Content-Length: 227
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:56:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j98&a=168024528&t=pageview&_s=1&dl=http%3A%2F%2F3.16.104.124%2Fadmin%2Fconfig.php&ul=en-us&de=UTF-8&dt=FreePBX%20Administration&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=1207365507&gjid=647398661&cid=2047502911.1669434988&tid=UA-1862516-7&_gid=617705197.1669434988&_r=1&_slc=1&cd1=&cd2=&cd3=&cd6=&z=894669209
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=168024528&t=pageview&_s=1&dl=http%3A%2F%2F3.16.104.124%2Fadmin%2Fconfig.php&ul=en-us&de=UTF-8&dt=FreePBX%20Administration&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=1207365507&gjid=647398661&cid=2047502911.1669434988&tid=UA-1862516-7&_gid=617705197.1669434988&_r=1&_slc=1&cd1=&cd2=&cd3=&cd6=&z=894669209
IP
File type ASCII text, with no line terminators
Hash 38684612f0c6bb6dfa16da92f4a6878f
6fe62d0dd7db314b7f9bb945672f078e01d27f0f
a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
POST /j/collect?v=1&_v=j98&a=168024528&t=pageview&_s=1&dl=http%3A%2F%2F3.16.104.124%2Fadmin%2Fconfig.php&ul=en-us&de=UTF-8&dt=FreePBX%20Administration&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=1207365507&gjid=647398661&cid=2047502911.1669434988&tid=UA-1862516-7&_gid=617705197.1669434988&_r=1&_slc=1&cd1=&cd2=&cd3=&cd6=&z=894669209 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://3.16.104.124
Connection: keep-alive
Referer: http://3.16.104.124/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://3.16.104.124
date: Sat, 26 Nov 2022 03:56:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 03:56:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11333
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 03:56:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11333
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 03:56:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11333
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 03:56:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11333
Expires: Sat, 26 Nov 2022 07:05:22 GMT
Date: Sat, 26 Nov 2022 03:56:29 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 04:38:44 GMT
age: 83865
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b1c6878914466cfece680fa7cb73502
47fac81a2dd809df5c42ca1362f71d553572d2b1
6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qKxrYxVsJWOXAbrn6IpwLycF3rknFLkQeDyKOLq5WyflvTLeUjg_Lg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:18:42 GMT
age: 20267
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56b1fea9-e9cd-44f8-a1ed-26557538d958.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56b1fea9-e9cd-44f8-a1ed-26557538d958.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8a82cc688f934411a894427bd493c429
fd67260f92d7faee2360956e8d2ed50a00c1dbcf
fbd1a487dac7233861d173e711218d3e3402bc71f538025c540b93696309dc67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56b1fea9-e9cd-44f8-a1ed-26557538d958.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12319
x-amzn-requestid: 6973e196-9eb3-4aea-9c60-b8e2158641ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVOoGkgIAMFY4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813590-62965d4c607d4f0a060265d9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: U2lRuGTHsBCJ7HqZcNbwMXTuNJsghqL0p-hMJyUfiWAdXla2pJ6JRw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:06 GMT
etag: "fd67260f92d7faee2360956e8d2ed50a00c1dbcf"
content-type: image/jpeg
age: 22223
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5088223f5973e3cd56f03f50a1e84b79
0b6c9b51d10762a4747286ab5b1c2354fa39c622
8159e4f7eec7bea518bb29e3fdb070bab4fb70116205577f7b7d74ad4d0dfbc7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8913
x-amzn-requestid: d0a9414c-eccf-44e8-adb7-92654544eeb5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWXEpeIAMFnzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-5825510666b3e80a5f83cafa;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: whO__FB0B2ywDP_p63eQ044RXbT207sX1i87I6nPAFUB85nSYc0Cuw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:06 GMT
age: 22223
etag: "0b6c9b51d10762a4747286ab5b1c2354fa39c622"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ff3e15-6cd5-46f6-800f-5ad08b71ffbc.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ff3e15-6cd5-46f6-800f-5ad08b71ffbc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 56d1528e942a2aa2a7f3f6a85f71e277
475980dd8b123ad0acdd54c441271bacad56489f
01f9bd707598d6cb869856ad01d1087f5abc8298727805f61266f6e823814cb8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9ff3e15-6cd5-46f6-800f-5ad08b71ffbc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10209
x-amzn-requestid: e6cf9a8b-bbdc-4978-a186-ffc82b369066
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWINF69oAMF5RA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813701-35f60a7425e3617e672916c9;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:43:29 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eq6JvA1Pf3M-JLZWNgHPo8sIGff8AYqLHpvVxCeu_-uLTQ4DCDN3NA==
via: 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:27:24 GMT
age: 19745
etag: "475980dd8b123ad0acdd54c441271bacad56489f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53b989dd-5b05-43e6-807e-30a5611591c1.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53b989dd-5b05-43e6-807e-30a5611591c1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9443750de7962c9e235cbb6dbda24df0
05de7f68103849bd0cd80a704ef97685d0150800
d84e37f9bfd9888a385364c52cdc0d817aa680ee0a83e579ca1f1083f1131468
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53b989dd-5b05-43e6-807e-30a5611591c1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12505
x-amzn-requestid: a89c780f-e1a4-451e-842b-656ba43958be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVOeHzfIAMFpGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381358f-3478b6c81d94ec65388bd3da;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mUic7CJjKQ8l7EKhTTSs2LTLaCqnVQUBuxzmfzET4TwSa_LX8na-MA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:43:28 GMT
age: 22381
etag: "05de7f68103849bd0cd80a704ef97685d0150800"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
3.16.104.124
23.36.76.226
93.184.220.29