thechance.site/kz/fortune/nl?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
301 Moved Permanently 560 B URL HTTP/1.1 thechance.site/kz/fortune/nl?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
IP
ASN #212531 UAB Interneto vizija
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (402)
Hash f98fd84bbcdfd1a15ac1600ea49df538
d96faa00738584408122b311950da6daeeb7b2e6
bf27e84d5cdaba6c965207366f920ee2cee1560d07f530783b08f3b3ec8c2b69
GET /kz/fortune/nl?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com HTTP/1.1
Host: thechance.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 04 Jan 2023 08:58:32 GMT
Server: Apache
Location: http://thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
Content-Length: 560
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5997a492d3d161c9009d95add566733
9db765ae549ebe4aa859ca27abe365cf7f62dc4d
1ec0de25b0afd3b402c728b9c6b47c4fcf25fb989052427886841a3f52510a0e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1EC0DE25B0AFD3B402C728B9C6B47C4FCF25FB989052427886841A3F52510A0E"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7530
Expires: Wed, 04 Jan 2023 11:04:02 GMT
Date: Wed, 04 Jan 2023 08:58:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16803ffa29e10ee999c43eb4e4acfe92
a5ede865a388fa440f20994b43c417d403e9a493
08de8f6abb622e84d2cb6e88dee8fc7c408147ac43da9c24d4cde510ed36b53a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08DE8F6ABB622E84D2CB6E88DEE8FC7C408147AC43DA9C24D4CDE510ED36B53A"
Last-Modified: Mon, 02 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19491
Expires: Wed, 04 Jan 2023 14:23:23 GMT
Date: Wed, 04 Jan 2023 08:58:32 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 04 Jan 2023 08:47:41 GMT
content-type: application/json
age: 651
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 225d42543c0190cdb3686bf236533f4f
13a0940800fce078487372b6b3ca614dd1ab6c31
766bbe15eb1642ac39e9b71669fbb44252471c8de5adb555cd1a76db44fbe7bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "766BBE15EB1642AC39E9B71669FBB44252471C8DE5ADB555CD1A76DB44FBE7BC"
Last-Modified: Mon, 02 Jan 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20127
Expires: Wed, 04 Jan 2023 14:33:59 GMT
Date: Wed, 04 Jan 2023 08:58:32 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZJf7IdjlKL8p+ITbRs15Jd8h6hfK9VMstYEW4flro7nZvbuh+rPbjLJqz8WGNQ9eI11SRpCt54c=
x-amz-request-id: Q0FVWPC2CZKBWKYK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 04 Jan 2023 07:59:02 GMT
age: 3570
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
200 OK 7.7 kB URL HTTP/1.1 thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
IP
ASN #212531 UAB Interneto vizija
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (15723)
Hash ce6dd396e666e8a48fc3cb44f313aea2
842abc160d73ae7895748ee05a3e3563f69773b3
c3b1c3ce5598e428d7528fe317290f71f1075d29d756e4c5d5b827bba73c2f4f
GET /kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com HTTP/1.1
Host: thechance.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 08:58:32 GMT
Server: Apache
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 04 Jan 2023 08:58:32 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
thechance.site/kz/fortune/nl/css/amazon.css
200 OK 1.4 kB URL HTTP/1.1 thechance.site/kz/fortune/nl/css/amazon.css
IP
ASN #212531 UAB Interneto vizija
File type CSV text\012- , ASCII text
Hash dba53cc75cf9b8c0386667ca20602f8c
7c70f45df560bb70d2c058058a636eb7bf561e51
2de04f53e640274cb22d3bf5d366e6aae7f8bb2eee272b7a3e78036f54b2e447
GET /kz/fortune/nl/css/amazon.css HTTP/1.1
Host: thechance.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 08:58:32 GMT
Server: Apache
Last-Modified: Wed, 14 Dec 2022 20:19:48 GMT
ETag: "13b9-5efcf7541eba6-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800
Expires: Wed, 11 Jan 2023 08:58:32 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1417
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive
Content-Type: text/css
thechance.site/kz/fortune/nl/images/refresh.png
200 OK 1.6 kB URL HTTP/1.1 thechance.site/kz/fortune/nl/images/refresh.png
IP
ASN #212531 UAB Interneto vizija
File type PNG image data, 60 x 54, 8-bit/color RGB, non-interlaced\012- data
Hash d99fc136124666d07dcd92ee9b57ab11
2da33147905803cba909fb0f6118a19934127339
b0947ebbd1659de62310b214d9752e9625147e43ac1c271d2a9bb68e881221ff
GET /kz/fortune/nl/images/refresh.png HTTP/1.1
Host: thechance.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 08:58:33 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 14 Dec 2022 20:19:48 GMT
ETag: "664-5efcf75497172"
Accept-Ranges: bytes
Content-Length: 1636
Cache-Control: max-age=604800
Expires: Wed, 11 Jan 2023 08:58:33 GMT
Keep-Alive: timeout=2, max=100
Content-Type: image/png
thechance.site/kz/fortune/nl/images/gift.gif
200 OK 16 kB URL HTTP/1.1 thechance.site/kz/fortune/nl/images/gift.gif
IP
ASN #212531 UAB Interneto vizija
File type GIF image data, version 89a, 100 x 100\012- data
Hash 573c467d7a0b1c4c009ba98927dfa335
78d9c7efaeed568b74f1e4d1b4eb67e51dbbb9f1
c4f1d8867d03d437694f1cac0c9df3a7f5006fb8df474023bfa1d78f88843ce8
GET /kz/fortune/nl/images/gift.gif HTTP/1.1
Host: thechance.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 08:58:33 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 14 Dec 2022 20:19:48 GMT
ETag: "3cf6-5efcf754477ff"
Accept-Ranges: bytes
Content-Length: 15606
Cache-Control: max-age=604800
Expires: Wed, 11 Jan 2023 08:58:33 GMT
Keep-Alive: timeout=2, max=100
Content-Type: image/gif
thechance.site/kz/fortune/nl/js/jquery.min.js
200 OK 33 kB URL HTTP/1.1 thechance.site/kz/fortune/nl/js/jquery.min.js
IP
ASN #212531 UAB Interneto vizija
File type ASCII text, with very long lines (32341)
Hash a455443006938869e740a38df8640ada
869bd24af8e61e2c6b23cf158853505d5fe7afc2
685bd4372d5eca42e9dae6db1678618e08d2ca201bc4e7525adabc20021338b5
Analyzer Verdict Alert fortinet Phishing
GET /kz/fortune/nl/js/jquery.min.js HTTP/1.1
Host: thechance.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 08:58:33 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 14 Dec 2022 20:19:48 GMT
ETag: "1787d-5efcf754c7acb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33369
Keep-Alive: timeout=2, max=100
Content-Type: application/javascript
thechance.site/kz/fortune/nl/spin_prize2.png
404 Not Found 196 B URL HTTP/1.1 thechance.site/kz/fortune/nl/spin_prize2.png
IP
ASN #212531 UAB Interneto vizija
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /kz/fortune/nl/spin_prize2.png HTTP/1.1
Host: thechance.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 404 Not Found
Date: Wed, 04 Jan 2023 08:58:33 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
thechance.site/kz/fortune/nl/images/ip7.png
200 OK 58 kB URL HTTP/1.1 thechance.site/kz/fortune/nl/images/ip7.png
IP
ASN #212531 UAB Interneto vizija
File type PNG image data, 200 x 205, 8-bit/color RGBA, non-interlaced\012- data
Hash d0f24523749ae712be55bbd1156c8912
2fe99223257db03a4ef8ef1260f4bae3ceb60dda
859515bd032db0ca5e82784387c320814718a5f69132ba8b536ceabeaf0eecbf
GET /kz/fortune/nl/images/ip7.png HTTP/1.1
Host: thechance.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 08:58:33 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 14 Dec 2022 20:19:48 GMT
ETag: "e115-5efcf75459cf8"
Accept-Ranges: bytes
Content-Length: 57621
Cache-Control: max-age=604800
Expires: Wed, 11 Jan 2023 08:58:33 GMT
Keep-Alive: timeout=2, max=100
Content-Type: image/png
thechance.site/kz/fortune/nl/images/spin3.png
200 OK 68 kB URL HTTP/1.1 thechance.site/kz/fortune/nl/images/spin3.png
IP
ASN #212531 UAB Interneto vizija
File type PNG image data, 330 x 330, 8-bit/color RGBA, non-interlaced\012- data
Hash cb61c64b457c53591bfa05115ca80801
b574198dfe0dffed87dee4ddbda3cd21cc171a4b
2ac2b892cac8661d4a89ed03f38f5e59767d7d1975519d64af9193d133fcf51e
GET /kz/fortune/nl/images/spin3.png HTTP/1.1
Host: thechance.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 200 OK
Date: Wed, 04 Jan 2023 08:58:33 GMT
Server: Apache
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 14 Dec 2022 20:19:48 GMT
ETag: "1083b-5efcf75469ae0"
Accept-Ranges: bytes
Content-Length: 67643
Cache-Control: max-age=604800
Expires: Wed, 11 Jan 2023 08:58:33 GMT
Keep-Alive: timeout=2, max=100
Content-Type: image/png
thechance.site/favicon.ico
404 Not Found 196 B URL HTTP/1.1 thechance.site/favicon.ico
IP
ASN #212531 UAB Interneto vizija
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /favicon.ico HTTP/1.1
Host: thechance.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thechance.site/kz/fortune/nl/?key=eyJ0aW1lc3RhbXAiOiIxNjcyODIyNjk2IiwiaGFzaCI6IjcyNTJjODYxMTU1MzNiN2QzNDk2YjJjYzEwY2I4ZTFjZDIzNmY3ZjUifQ==&ccc=US&ppp=PropellerAds:%20Push%20Notifications&tdom=www.mediacdnc.com&bemobdata=c=63cf3233-234a-4bd3-a207-d50e56646241..l=138188af-9d53-4dff-b1c3-88e15e5f5249..a=0..b=0..r=www.mediacdnc.com
HTTP/1.1 404 Not Found
Date: Wed, 04 Jan 2023 08:58:33 GMT
Server: Apache
Content-Length: 196
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 04 Jan 2023 08:08:11 GMT
age: 3022
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 49d6e3cef8f01f0261ff5644001d652b
03eca12234d73b1f3e8489939e4f6551914d29b2
bb680ef4d4989e9e1147da3a7d5ccc518f63108b4ed1f2367a2793db0f740f21
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4481
Cache-Control: max-age=91377
Content-Type: application/ocsp-response
Date: Wed, 04 Jan 2023 08:58:33 GMT
Etag: "63b3f029-1d7"
Expires: Thu, 05 Jan 2023 10:21:30 GMT
Last-Modified: Tue, 03 Jan 2023 09:06:49 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: naS99YYytg6uCSOy593yBA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IYa/fOvC4A6djqln9ANAvMmYLsw=
deehalig.net/pfe/current/micro.tag.min.js?z=5225827&sw=/sw-check-permissions-f820d.js
200 OK 14 kB URL HTTP/1.1 deehalig.net/pfe/current/micro.tag.min.js?z=5225827&sw=/sw-check-permissions-f820d.js
IP
File type C source, ASCII text, with very long lines (39559), with no line terminators
Hash 710afc5f904ea87801da7e4974cf1979
8e8351827329a8671b337441784391195dc27c4f
24e7227f0bed8ca17bcc0a344c550167c34016d0160111bfff4136b570f82ca8
GET /pfe/current/micro.tag.min.js?z=5225827&sw=/sw-check-permissions-f820d.js HTTP/1.1
Host: deehalig.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thechance.site/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 04 Jan 2023 08:58:35 GMT
Content-Type: application/javascript
Last-Modified: Wed, 21 Dec 2022 12:58:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63a302ea-9a87"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19010
Expires: Wed, 04 Jan 2023 14:15:25 GMT
Date: Wed, 04 Jan 2023 08:58:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19010
Expires: Wed, 04 Jan 2023 14:15:25 GMT
Date: Wed, 04 Jan 2023 08:58:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19010
Expires: Wed, 04 Jan 2023 14:15:25 GMT
Date: Wed, 04 Jan 2023 08:58:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19010
Expires: Wed, 04 Jan 2023 14:15:25 GMT
Date: Wed, 04 Jan 2023 08:58:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 872ad13c3966689cbd481bebca0b21f8
2a052c414b68b9e71b00fa3903995e8bdd22a81c
bd2222d291deec7ba01875b7ddfd0d27de71e68fc600057fb3d1fa9394aa46fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2222D291DEEC7BA01875B7DDFD0D27DE71E68FC600057FB3D1FA9394AA46FA"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19010
Expires: Wed, 04 Jan 2023 14:15:25 GMT
Date: Wed, 04 Jan 2023 08:58:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd778a59b-6bc4-4e21-bec7-38d1b87be05b.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd778a59b-6bc4-4e21-bec7-38d1b87be05b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fdda07f757a2d7f87e34e168f8dcdf1d
861b6c16e2a034b9793dde7a6898cbf485c4b6e1
21a043424ce5469863e0208d1de4a1927d0ca44b9d1a6d8cc627d44dd9eadad6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd778a59b-6bc4-4e21-bec7-38d1b87be05b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12254
x-amzn-requestid: f38b287f-1426-4fd8-8608-72a72778a939
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3pVHPKIAMF7AA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49fd5-1a67e1244d14cbac5f03a8d7;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:36:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: cWXYmrpcCmufg0dFPyV9jhe8n5dMr_oFEFJ6vhIF_kFikH5BEqHOsA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:51:57 GMT
age: 39998
etag: "861b6c16e2a034b9793dde7a6898cbf485c4b6e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b11930d-f72d-464d-8f7d-bbd0bb247c74.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b11930d-f72d-464d-8f7d-bbd0bb247c74.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 235b1a6e2b61b3068bf7a8e7a2607634
0df6f090574996e472064765c6f27b6b8e012414
6e6061581018dc0ec494631e7861cf2e44f82ac94d1b0056679555ff6dae5f8e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b11930d-f72d-464d-8f7d-bbd0bb247c74.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13546
x-amzn-requestid: 6758cca7-bc06-43dd-8545-3e05aa760218
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3p7GYjIAMFw7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49fd8-038317190f3df26f13c9d961;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:36:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Pmw35oCAPfvYxFowD4CDyUUrQI_V69MOGrpK55fUcvU2aoA1G19P3g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:49:21 GMT
age: 40154
etag: "0df6f090574996e472064765c6f27b6b8e012414"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddefc5f-f18f-4fa5-8a85-2901ccb91df8.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddefc5f-f18f-4fa5-8a85-2901ccb91df8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7c7c14fa7fe29c36e5bd58a3860ee09f
0347e99565ad7ed28c6eefa4169efa4730430766
de81626ffc61c8058735aa5041d24058af5f0c173fffecb632ad96848fa13f84
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddefc5f-f18f-4fa5-8a85-2901ccb91df8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8894
x-amzn-requestid: 30a8d308-21e3-4801-8b7f-929335ccd0a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3HtHYSoAMFgYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49efd-1712690766a0c610426f735b;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:32:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6WI2ulAitm0_VgJakPgD90pNFz-BJFRdQBjZru-UGdSliw6eLG52pw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:51:33 GMT
age: 40022
etag: "0347e99565ad7ed28c6eefa4169efa4730430766"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V8_4JXT2EDqqzVxBjZK7SUVVS9Pez_EbpGP8BCMX0FrS2x2srUr2Ug==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 22:11:09 GMT
age: 38846
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4067fc32-66b1-4bfa-b323-db56b06c033a.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4067fc32-66b1-4bfa-b323-db56b06c033a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cb4e633dca07ae6d4a7e05137ce2eb3
331d346a6dc5142f912bebcf62da738af0cb7392
07c08fb0091da17ce91c70581f994ad57b337eede81b19cfecf066ebb0c60b4a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4067fc32-66b1-4bfa-b323-db56b06c033a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5028
x-amzn-requestid: 96222de7-274b-43a7-a6b5-25fff1653552
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGCNXGY3IAMF0lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b24a55-29c6f72f4eb27b552e713d0d;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 03:07:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NZp-3CPOet1s2vF0fWYHluhAQ1FvCmfUK8uOL7Kr0KcgUjf2-7GDlw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 06:11:18 GMT
age: 10037
etag: "331d346a6dc5142f912bebcf62da738af0cb7392"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55a5fce7-62ea-45af-95f3-3f1e53631f85.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55a5fce7-62ea-45af-95f3-3f1e53631f85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ce5d6020322f69b1ea550df3f8a8bca
367da0366533e1adf69d720c210425d0d7ba52e9
d09eb819ea0560885730b93f26b24ba3d1f2c7b93cd2e152d69fa00a17b4181b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55a5fce7-62ea-45af-95f3-3f1e53631f85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6980
x-amzn-requestid: aea57519-f763-4b86-8e6d-8f4faae04088
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eL3HtE6AoAMFfKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b49efd-78f1b4fb5f9d03cc12a27ce8;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 21:32:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PgsrCIMY8Ofr9Ea1_cJKfmTXCE-Y7E5ZvIBRjG_Qb20gNWAk8Lzr1w==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 03 Jan 2023 21:50:50 GMT
age: 40065
etag: "367da0366533e1adf69d720c210425d0d7ba52e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
212.237.233.86
52.88.220.109
139.45.197.251
23.33.119.27