cn47e.bemobtrk.com/go/2e8a0f04-effe-458c-8179-60485c87d671
302 Found 440 B URL HTTP/1.1 cn47e.bemobtrk.com/go/2e8a0f04-effe-458c-8179-60485c87d671
IP
File type HTML document, ASCII text, with very long lines (440), with no line terminators
Hash 4367e6976037e72dbc24b93f9823d056
c4a47ea3d347d9cb9c48805cf0b9f430cd16e879
b108b54d9e15c1800fd088f9f84cbf43d20847068b1c3c02bffc9117d1438f7a
GET /go/2e8a0f04-effe-458c-8179-60485c87d671 HTTP/1.1
Host: cn47e.bemobtrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: openresty
Date: Sun, 15 Jan 2023 22:06:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 440
Connection: keep-alive
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
Access-Control-Allow-Origin: *
Location: https://goforrewas.xyz/RM/Romania3?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Set-Cookie: bemob-uniq-visit:2e8a0f04-effe-458c-8179-60485c87d671=1; Domain=cn47e.bemobtrk.com; Path=/; Expires=Mon, 16 Jan 2023 22:06:26 GMT; HttpOnly
bemob-rotation:2e8a0f04-effe-458c-8179-60485c87d671:random:facede850305a9a991ac600ef4669916=0-0-0; Domain=cn47e.bemobtrk.com; Path=/; Expires=Mon, 16 Jan 2023 22:06:26 GMT; HttpOnly
bemob-track-url=https%3A%2F%2Fgoforrewas.xyz%2FRM%2FRomania3%3Fdevicemodel%3D%26browser%3DFirefox%26ip%3D91.90.42.154%26bemobdata%3Dc%253D2e8a0f04-effe-458c-8179-60485c87d671..l%253D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%253D0..b%253D0; Domain=cn47e.bemobtrk.com; Path=/; Expires=Mon, 16 Jan 2023 22:06:26 GMT; HttpOnly
Vary: Accept
X-Response-Time: 11.205ms
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2258cd6b877a3aca8f4c84074e65ac4b
4e46c70941f8e497e8afc8d078644e7f81761a1c
faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13508
Expires: Mon, 16 Jan 2023 01:51:34 GMT
Date: Sun, 15 Jan 2023 22:06:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0643dc6b6fed33b3537160b6bb77bcbf
aa43bd1fbb30d2219f3285c1ee4991ffb33562c5
f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F"
Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4361
Expires: Sun, 15 Jan 2023 23:19:07 GMT
Date: Sun, 15 Jan 2023 22:06:26 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 15 Jan 2023 21:42:08 GMT
content-type: application/json
age: 1458
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d6e2abd68203014e8e24d4a9e20e980a
5edbbb1a36083d5077b90b82e7aa10049e90c5d6
88cf8dae194a5e92a8c36a4c54ae71a609eaaed6e99d3986b3834c40d2fceeaa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "88CF8DAE194A5E92A8C36A4C54AE71A609EAAED6E99D3986B3834C40D2FCEEAA"
Last-Modified: Sun, 15 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12425
Expires: Mon, 16 Jan 2023 01:33:31 GMT
Date: Sun, 15 Jan 2023 22:06:26 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e1yGABiNP+SOUBgHlmalQMG49N7V5E+DqtCmJMTjq90pHZe5psYa7md6mqlZg/GZTV/uivpYUIA=
x-amz-request-id: 6ZRVY4ZFYZDVDE3G
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 15 Jan 2023 21:44:20 GMT
age: 1326
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 22:06:26 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 15 Jan 2023 21:33:45 GMT
age: 1962
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
goforrewas.xyz/RM/Romania3?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
301 Moved Permanently 407 B URL HTTP/1.1 goforrewas.xyz/RM/Romania3?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d70ef706d19beb199ada527134013161
6e42a116894c35cd1fee5762976b62c0696e0037
ac3e85e10320884817f592b48a36422f0058009e180b6c54392b5c3bf79c8f7e
GET /RM/Romania3?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0 HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Sun, 15 Jan 2023 22:06:27 GMT
Server: Apache
Location: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Content-Length: 407
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.digicert.com/
200 OK 471 B IP
Hash e5f9cfd32ba0e755eba2eba2bca5bc3c
012c01ac7a06da9f57e0e1c24658a4bd40e82518
ffd7fc715a11f6579f953c2f0f65128000733620fcc777cd0a4c5bb895c64ad2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5518
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 22:06:27 GMT
Last-Modified: Sun, 15 Jan 2023 20:34:29 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
200 OK 23 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (729)
Hash df336a66c254908dc3c034997ca391a6
290b351fd4b32b75b92141c48bbac1e7b3dd0f8b
83ac5e18b20ada9b3270bf765ec3a4cdf1bcf3c20571777234cea33de1e7502d
GET /RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0 HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:27 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2023 20:17:58 GMT
Accept-Ranges: bytes
Content-Length: 23425
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html
goforrewas.xyz/RM/Romania3/css/style.css
200 OK 3.6 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/css/style.css
IP
File type ASCII text, with very long lines (768)
Hash 2d04f206b35df0f0b8c09dd625eef396
9fb00be8e556c6c91c5733fa40eea4c73a4e2b91
ed75d2a0daf75b1e36e8213f5c4e7f93fa86f5ef08d6c5d3fd85fc67efa14350
GET /RM/Romania3/css/style.css HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:27 GMT
Server: Apache
Last-Modified: Wed, 03 Nov 2021 03:54:36 GMT
Accept-Ranges: bytes
Content-Length: 3642
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8+KtMddrR/tw+unX2nzl8w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mG+FwXJFaCK54+wmsLtmA9nLpUI=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3ee298482e8025b16b90899b84c98d1
ce5050ce27200b3408a8e5113adcc7a8d14b4796
4c3dd7d296e502765b2de450a4ecb5f8c872ed477b464b9913d2633125680ff0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 22:06:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3ee298482e8025b16b90899b84c98d1
ce5050ce27200b3408a8e5113adcc7a8d14b4796
4c3dd7d296e502765b2de450a4ecb5f8c872ed477b464b9913d2633125680ff0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 22:06:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f3ee298482e8025b16b90899b84c98d1
ce5050ce27200b3408a8e5113adcc7a8d14b4796
4c3dd7d296e502765b2de450a4ecb5f8c872ed477b464b9913d2633125680ff0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 22:06:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goforrewas.xyz/RM/Romania3/js/confetti.js.download
200 OK 5.7 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/js/confetti.js.download
IP
Hash 0bf680ed10be0fc040015e7e735a4ae3
d02ea58f56584cb59cd2f7799822283032a666ee
f79f02e3e9615682a3fa00c2aee52f2cea0656407ef311f5a0367dccd06186d9
GET /RM/Romania3/js/confetti.js.download HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:27 GMT
Server: Apache
Last-Modified: Sun, 27 Jun 2021 08:25:48 GMT
Accept-Ranges: bytes
Content-Length: 5735
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
goforrewas.xyz/RM/Romania3/css/main.css
200 OK 11 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/css/main.css
IP
Hash 1348c524e67043aa0f6269096d3aa44d
01e58b6b8595e6020c355064ef9d3dde2ca999a2
96e2831906cacf747cd5bc4db814dbdeb755dff4d078c21c121bf4a68c75d75f
GET /RM/Romania3/css/main.css HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:27 GMT
Server: Apache
Last-Modified: Wed, 03 Nov 2021 21:39:12 GMT
Accept-Ranges: bytes
Content-Length: 10972
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
goforrewas.xyz/RM/Romania3/js/count_down.js
200 OK 1.2 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/js/count_down.js
IP
File type ASCII text, with CRLF line terminators
Hash fc01db2be817b3fb3184f98127ff0277
5ca3ef6c39ccee599f527e17682dd3b4830987ca
bfb325afbe909229bbc56554afd9a3b530df9ebcd0edec8df1960211c5d8bbab
GET /RM/Romania3/js/count_down.js HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:27 GMT
Server: Apache
Last-Modified: Thu, 12 Aug 2021 19:59:56 GMT
Accept-Ranges: bytes
Content-Length: 1229
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
goforrewas.xyz/RM/Romania3/js/script.js.download
200 OK 4.0 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/js/script.js.download
IP
Hash af7eb0685a2dc74d072e84d50f39738f
e8dac0046b0fa00c655ef2b05a292e984d128457
424adf851ef0f98ea1b88589953e95aa27c5cdb746288371b63e253265cc233d
GET /RM/Romania3/js/script.js.download HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:27 GMT
Server: Apache
Last-Modified: Wed, 03 Nov 2021 03:25:10 GMT
Accept-Ranges: bytes
Content-Length: 3977
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
goforrewas.xyz/RM/Romania3/new/jquery.min.js.download
404 Not Found 315 B URL HTTP/1.1 goforrewas.xyz/RM/Romania3/new/jquery.min.js.download
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /RM/Romania3/new/jquery.min.js.download HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 15 Jan 2023 22:06:27 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
goforrewas.xyz/RM/Romania3/new/confetti.js.download
404 Not Found 315 B URL HTTP/1.1 goforrewas.xyz/RM/Romania3/new/confetti.js.download
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /RM/Romania3/new/confetti.js.download HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9442f1d8864feb84a623305a281e4c56
45250ab44f89bf1a0f665da8b47da06dc1af2af0
2086a32de0797aa6146b8fe1d7422342dbc9f1da0d81093915f42b69a5dcbc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 22:06:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9442f1d8864feb84a623305a281e4c56
45250ab44f89bf1a0f665da8b47da06dc1af2af0
2086a32de0797aa6146b8fe1d7422342dbc9f1da0d81093915f42b69a5dcbc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 22:06:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/changa/v20/2-c79JNi2YuVOUcOarRPgnNGooxCZ62xcjfj9w.woff2
200 OK 9.1 kB URL HTTP/2 fonts.gstatic.com/s/changa/v20/2-c79JNi2YuVOUcOarRPgnNGooxCZ62xcjfj9w.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9120, version 1.0\012- data
Hash 18ad880aaa4e28b6cd1ef0d30ac95573
da6a33a1ecc296aa481432e2727b273140b78543
f2c5710634752d1a156adf5ac961c8400e3a577c90f97a6a293a07f4a28957fd
GET /s/changa/v20/2-c79JNi2YuVOUcOarRPgnNGooxCZ62xcjfj9w.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goforrewas.xyz
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 15 Jan 2023 10:53:31 GMT
expires: Mon, 15 Jan 2024 10:53:31 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 24 Jun 2022 18:40:48 GMT
content-type: font/woff2
age: 40377
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/changa/v20/2-c79JNi2YuVOUcOarRPgnNGooxCZ62xcjnj9ytf.woff2
200 OK 5.3 kB URL HTTP/2 fonts.gstatic.com/s/changa/v20/2-c79JNi2YuVOUcOarRPgnNGooxCZ62xcjnj9ytf.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 5268, version 1.0\012- data
Hash 2366620088597c2bfe12a049d40c1bf0
69b1ffbf96cf863f1074655bf73fe60732ed42e7
f6b380e8e9404a903a0a7692e540916123831856366c2afc96839a160d47e481
GET /s/changa/v20/2-c79JNi2YuVOUcOarRPgnNGooxCZ62xcjnj9ytf.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://goforrewas.xyz
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5268
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 14 Jan 2023 18:20:38 GMT
expires: Sun, 14 Jan 2024 18:20:38 GMT
cache-control: public, max-age=31536000
age: 99950
last-modified: Fri, 24 Jun 2022 18:40:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9442f1d8864feb84a623305a281e4c56
45250ab44f89bf1a0f665da8b47da06dc1af2af0
2086a32de0797aa6146b8fe1d7422342dbc9f1da0d81093915f42b69a5dcbc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 22:06:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
goforrewas.xyz/RM/Romania3/img/lg.png
200 OK 5.6 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/lg.png
IP
File type PNG image data, 150 x 73, 8-bit/color RGBA, non-interlaced\012- data
Hash 0eae805486c5b508b6d792e770bb75d0
86f611ca6ded1307c76d891be134636ebed8b694
1f51d5663a29e0b5caab6581f74d59126cfdce1adfd28aaa0fa30dd4b79eb23c
GET /RM/Romania3/img/lg.png HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Fri, 10 Dec 2021 22:12:20 GMT
Accept-Ranges: bytes
Content-Length: 5613
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
goforrewas.xyz/RM/Romania3/img/bg.jpg
200 OK 1.6 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/bg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x600, components 1\012- data
Hash 206202671b45d7642a72239b49b6d0e6
99d2cb7283e517039bd449d800b00737001a25bb
09c0abff830556a0fde331d383b3652703318e272db1646ffe3d0d37ce414937
GET /RM/Romania3/img/bg.jpg HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Wed, 03 Nov 2021 05:12:10 GMT
Accept-Ranges: bytes
Content-Length: 1579
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
goforrewas.xyz/RM/Romania3/img/flag.png
200 OK 4.0 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/flag.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 6c420ffc936b3445640d26324b252976
fd620c4b7e19bbccb4ee707f238e57e46d75f7d2
5f802b3e7e9294978951b0c546d38c1bc26d2de92068c413d0637c320197a885
GET /RM/Romania3/img/flag.png HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Fri, 10 Dec 2021 23:24:22 GMT
Accept-Ranges: bytes
Content-Length: 4006
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
goforrewas.xyz/RM/Romania3/img/prof1.jpg
200 OK 32 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/prof1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=679, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=620], progressive, precision 8, 108x118, components 3\012- data
Hash d76f4064c8eee9eeb309eb7812138fc5
f2c3bb284bab7209280b6e9b0d347778195c0ce6
b7e487cf4d05c53f659a5a31d13a9a384224d6fcac0061f42c9ea0af8e688cdb
GET /RM/Romania3/img/prof1.jpg HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Sat, 17 Dec 2022 19:25:52 GMT
Accept-Ranges: bytes
Content-Length: 32058
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
goforrewas.xyz/RM/Romania3/js/jquery.min.js.download
200 OK 84 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/js/jquery.min.js.download
IP
File type ASCII text, with very long lines (32025)
Hash 4a356126b9573eb7bd1e9a7494737410
8258d046f17dd3c15a5d3984e1868b7b5d1db329
22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5
GET /RM/Romania3/js/jquery.min.js.download HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:27 GMT
Server: Apache
Last-Modified: Wed, 03 Nov 2021 01:59:02 GMT
Accept-Ranges: bytes
Content-Length: 84380
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
goforrewas.xyz/RM/Romania3/img/prof5.jpg
200 OK 26 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/prof5.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=182, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=174], progressive, precision 8, 144x151, components 3\012- data
Hash 0d036cc60b0b716e4babb3840ea4bb55
91a8b1bc8834db4d729a58281df0e6d5e06f80ef
b1f6ef6dfa755fa03f98c79606adabde75632ed3153ef5a5ce8ea60e93977ed8
GET /RM/Romania3/img/prof5.jpg HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Sat, 17 Dec 2022 19:27:58 GMT
Accept-Ranges: bytes
Content-Length: 25939
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/jpeg
goforrewas.xyz/RM/Romania3/img/prof2.jpg
200 OK 27 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/prof2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=228, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=221], progressive, precision 8, 108x111, components 3\012- data
Hash 5d790dbb4e16c70f8718380ec6128bae
b8c003797bf6cf6a9a8911ab9ab59c388a0cc183
ccf4e32ec9e0ab7dfe3dbf068ee1eefb39546fe34a1c0ccd9c8d66ac2bd43def
GET /RM/Romania3/img/prof2.jpg HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Sat, 17 Dec 2022 19:26:32 GMT
Accept-Ranges: bytes
Content-Length: 27385
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
goforrewas.xyz/RM/Romania3/img/image1.png
200 OK 66 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/image1.png
IP
File type PNG image data, 400 x 331, 8-bit/color RGBA, non-interlaced\012- data
Hash 9a01009a916691d5e6faa2ff116978f0
d41db98df78ea4060bd45340b855bda69d6659a0
de65620461f5550d628f9d720ebee2f3e4727126523a74bd76d0efc445d266bd
GET /RM/Romania3/img/image1.png HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Sat, 17 Dec 2022 19:40:40 GMT
Accept-Ranges: bytes
Content-Length: 65908
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
goforrewas.xyz/RM/Romania3/img/logo.jpg
200 OK 3.8 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/logo.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 119x119, components 3\012- data
Hash d8183c8ba952bf52800ccecef276731f
39ed353de2b058c0bcb1ee54ec965708b6ecdd89
7943745000b76b7da198f7ce8aa5712b8ba1d985bf81203aa4b68ddc8c3f5769
GET /RM/Romania3/img/logo.jpg HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Fri, 10 Dec 2021 22:10:14 GMT
Accept-Ranges: bytes
Content-Length: 3757
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
goforrewas.xyz/RM/Romania3/img/prof3.jpg
200 OK 27 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/prof3.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=13, height=446, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=444], progressive, precision 8, 144x145, components 3\012- data
Hash 7ee8e31cfa2cf3bb23fbf7be70ac064a
e9be1f866409c1964a4b7d67cbad058fb3c89c9a
f8a9c76534560681014793199c0f1440ce88f14650d7403957d90a359855549c
GET /RM/Romania3/img/prof3.jpg HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Sat, 17 Dec 2022 19:29:24 GMT
Accept-Ranges: bytes
Content-Length: 27175
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
goforrewas.xyz/RM/Romania3/img/prof4.jpg
200 OK 29 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/prof4.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=13, height=353, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=279], progressive, precision 8, 120x152, components 3\012- data
Hash 38b84007a9d143fd8a01cc5a027357de
1001fb81030f39981c3ae9c3b429d86ce6f44757
804a95d573e7fafe98e48589f0257023e2a5616769f06727ae697a857c96b586
GET /RM/Romania3/img/prof4.jpg HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Sat, 17 Dec 2022 19:27:22 GMT
Accept-Ranges: bytes
Content-Length: 28985
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
goforrewas.xyz/RM/Romania3/new/jquery.min.js.download
404 Not Found 315 B URL HTTP/1.1 goforrewas.xyz/RM/Romania3/new/jquery.min.js.download
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /RM/Romania3/new/jquery.min.js.download HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
goforrewas.xyz/RM/Romania3/img/chk1.jpg
200 OK 38 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/chk1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2021:09:21 17:53:11], baseline, precision 8, 300x142, components 3\012- data
Hash b804505cce1416cafa694f92dff4c919
dd65743614fb8f788b38cd69d2b14857bda8c2ad
b8bd66522db2cb71e0f0d138e7eef8a26bf25d516f63ffc7db6b6fada4355078
GET /RM/Romania3/img/chk1.jpg HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Sat, 17 Dec 2022 19:40:24 GMT
Accept-Ranges: bytes
Content-Length: 38264
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
goforrewas.xyz/RM/Romania3/img/chk2.jpg
200 OK 38 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/chk2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2021:09:21 17:53:11], baseline, precision 8, 300x142, components 3\012- data
Hash 10b26e3d217546bf9d938a3c7a6449c9
f29e79725f1c606628e861a25dcc464228f82799
a8efee949319ab0e178333a235da6d71e193109d0a691f4d76bf83e69e1330fe
GET /RM/Romania3/img/chk2.jpg HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Sat, 17 Dec 2022 19:40:02 GMT
Accept-Ranges: bytes
Content-Length: 38120
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
goforrewas.xyz/RM/Romania3/img/image.jpg
200 OK 38 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/image.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2021:09:21 17:53:11], baseline, precision 8, 300x142, components 3\012- data
Hash fccecd92d9ce63cdf2fe144cfb2961aa
136619b32894bea514c2f55766e01096cf1196d9
b87ef8b53588ba9311f71c69cc2894ad98057347ec29c8814e06814860982cfb
GET /RM/Romania3/img/image.jpg HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Sat, 17 Dec 2022 19:39:44 GMT
Accept-Ranges: bytes
Content-Length: 37469
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/jpeg
goforrewas.xyz/RM/Romania3/new/confetti.js.download
404 Not Found 315 B URL HTTP/1.1 goforrewas.xyz/RM/Romania3/new/confetti.js.download
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /RM/Romania3/new/confetti.js.download HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 96ee8b87ee731321f00a57ff19025790
2836f60fa77c2bef33a0d54288d26c447e519f3b
e1b0a0ad533a8e94c27820c7b5aeca65741ad3ea5c0e945644b07208c3def23a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E1B0A0AD533A8E94C27820C7B5AECA65741AD3EA5C0E945644B07208C3DEF23A"
Last-Modified: Fri, 13 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10001
Expires: Mon, 16 Jan 2023 00:53:09 GMT
Date: Sun, 15 Jan 2023 22:06:28 GMT
Connection: keep-alive
goforrewas.xyz/RM/Romania3/img/ld.gif
200 OK 122 kB URL HTTP/1.1 goforrewas.xyz/RM/Romania3/img/ld.gif
IP
File type GIF image data, version 89a, 246 x 246\012- data
Size 122 kB (121587 bytes)
Hash 1f32223b3bcbe23d6efe15d914206440
1faa0c1e65002ca3880cb764be63abef5a3efac5
c0f27622e1c77dfe225b6e2637211c61861471c39e585461a5dc55017950e92a
GET /RM/Romania3/img/ld.gif HTTP/1.1
Host: goforrewas.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/RM/Romania3/?devicemodel=&browser=Firefox&ip=91.90.42.154&bemobdata=c%3D2e8a0f04-effe-458c-8179-60485c87d671..l%3D2b5dcf77-5b9b-4dbe-8cf9-708575a77256..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 22:06:28 GMT
Server: Apache
Last-Modified: Wed, 03 Nov 2021 20:02:56 GMT
Accept-Ranges: bytes
Content-Length: 121587
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/gif
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17780
Expires: Mon, 16 Jan 2023 03:02:48 GMT
Date: Sun, 15 Jan 2023 22:06:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17780
Expires: Mon, 16 Jan 2023 03:02:48 GMT
Date: Sun, 15 Jan 2023 22:06:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17780
Expires: Mon, 16 Jan 2023 03:02:48 GMT
Date: Sun, 15 Jan 2023 22:06:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17780
Expires: Mon, 16 Jan 2023 03:02:48 GMT
Date: Sun, 15 Jan 2023 22:06:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17780
Expires: Mon, 16 Jan 2023 03:02:48 GMT
Date: Sun, 15 Jan 2023 22:06:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d2ca2b-548c-4f63-b8a5-e55b6e92d5e9.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d2ca2b-548c-4f63-b8a5-e55b6e92d5e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c609c89120eef87bbdd0d8ee5ee18f9
be8e369be0ccc707b904546798aacc9afe413cfa
feaa9f41b45aaa71d87008fe3112bc09e41cf6c2c500b4bc1adc125c7c82eee1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d2ca2b-548c-4f63-b8a5-e55b6e92d5e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4981
x-amzn-requestid: b38d8240-7f85-4fd6-845b-54ddc6da7521
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ewH9tHxWoAMFTQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c32057-657c5e342a66713b0f5f8f0b;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 21:36:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gnhlIFBkptGNZ4DtvSCoPj080V59q8dZ4KhSqipm7ol-0LD9ZsHhPQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 21:38:36 GMT
age: 1672
etag: "be8e369be0ccc707b904546798aacc9afe413cfa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: 33735807-3403-41ee-a488-a3f25f9b12d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ewX9XFvoIAMFzMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c339ee-65def8747314ecb63b000a4c;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 23:25:34 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: D6FaDcaWbJehldBR7ASM60ey56hQS1H4ZpLlGqI-ptDupfJT-iugfw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 05:58:31 GMT
age: 58077
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 74ac30be02dee9dcfeee79a7dc54edff
1368d81de22ea2e4054a3e1a8f01ef337c63e35b
8abc2f276906dfb9ce75c2526d2c2cfa6aea6dbe13f4046de1040cd611cbbc1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9801
x-amzn-requestid: 39d84a20-55f7-4b7c-abc4-9ac1ff100da9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eqSkoGCZoAMF1zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0caea-4f7a1cf676335cc83018dc51;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 03:07:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rUFicgD94yxyZhMtQm-aYS-QpZXn07rLRBhnBLMTIQh6qHKOX_LRFg==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 05:32:33 GMT
age: 59635
etag: "1368d81de22ea2e4054a3e1a8f01ef337c63e35b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22bc3d9c-c641-44bc-8984-14b267d61d21.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22bc3d9c-c641-44bc-8984-14b267d61d21.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 15d27349999654cef859ce88c7667481
9fff393bf1bfa3b7343f38377e8c8ba62f1c0330
86cb634ee11bcffc4f3ee27a2296391ef30db42fad0ff4175e972f326874f0a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22bc3d9c-c641-44bc-8984-14b267d61d21.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10853
x-amzn-requestid: 6b62dbea-3621-4c4b-acbd-7b9dc716388f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ewYy0E6QIAMFpxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c33b45-7ffc9a9e28483e9726018e05;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 23:31:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yyeXOa4MReEjxsfEcvCVO3Qca3dXxD0qXrmqhUtAVhN39ExEVltpvQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 12:01:41 GMT
age: 36287
etag: "9fff393bf1bfa3b7343f38377e8c8ba62f1c0330"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c678ae9-1df5-47c4-bbe3-ec12e97322d9.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c678ae9-1df5-47c4-bbe3-ec12e97322d9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 90fc5463f271bab652af099cb526f189
805c27d8f82a5eb6583814313c36f5e7699408e5
749dca33aa337b494fb113896bf035bc9dcb17068ecffdf30fc5ac85a4ac5185
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c678ae9-1df5-47c4-bbe3-ec12e97322d9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5495
x-amzn-requestid: d76b8f1d-37a2-47ac-9acf-1b0a44a4a5fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eqsroF62IAMF-mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0f4b0-67700bfd11f1ad5d0aaab92d;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 06:05:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: i1qN9bIaz5ekgkM81KehmDDQpzBULDfPkp-fjEOHiZxFVogDBOIGzg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 23:08:05 GMT
age: 82703
etag: "805c27d8f82a5eb6583814313c36f5e7699408e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91a664271b9042ab5a34c1259df6ab93
7ce177939ceed31dbe137996cace3f71eaab3cf4
08b872b4c8dc8d4b5e26d7c5e7985c144dcf45623737e6daf7813b2add8ab013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11285
x-amzn-requestid: 46c0b124-5916-4067-99af-2fa9812dfb2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ev-1zHc4oAMFV6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c311be-3ffbee9348f4351459ed0099;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 20:34:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xvBnmF39Og8Zbf9xZ0IjC0Kd5cIYRc4ONYqolYdxxmzS8i-K2REYSA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 04:40:16 GMT
age: 62772
etag: "7ce177939ceed31dbe137996cace3f71eaab3cf4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bujerdaz.com/pfe/current/micro.tag.min.js?z=5587697&sw=/sw-check-permissions-46b5d.js
200 OK 14 kB URL HTTP/2 bujerdaz.com/pfe/current/micro.tag.min.js?z=5587697&sw=/sw-check-permissions-46b5d.js
IP
Hash eee2e91f7e8ae9fcce0f6325445a1990
174df245ca04ddd8fbed0e6269ff1ad2c7449ca9
8012fee7e1437f2bc6d8f40df3fdf372ccea3fe504883466814c0e3b49fad9f5
Analyzer Verdict Alert quad9 Sinkholed
GET /pfe/current/micro.tag.min.js?z=5587697&sw=/sw-check-permissions-46b5d.js HTTP/1.1
Host: bujerdaz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 22:06:28 GMT
content-type: application/javascript
last-modified: Wed, 21 Dec 2022 12:58:18 GMT
etag: W/"63a302ea-9a87"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
bujerdaz.com/zone?&pub=0&zone_id=5587697&is_mobile=false&domain=goforrewas.xyz&var=&ymid=&var_3=&dsig=&action=prerequest
200 OK 0 B URL HTTP/2 bujerdaz.com/zone?&pub=0&zone_id=5587697&is_mobile=false&domain=goforrewas.xyz&var=&ymid=&var_3=&dsig=&action=prerequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /zone?&pub=0&zone_id=5587697&is_mobile=false&domain=goforrewas.xyz&var=&ymid=&var_3=&dsig=&action=prerequest HTTP/1.1
Host: bujerdaz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://goforrewas.xyz
Connection: keep-alive
Referer: https://goforrewas.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 22:06:35 GMT
content-length: 0
x-trace-id: 571c6d062fed7152f4a1d773c1e16ce1
access-control-allow-origin: https://goforrewas.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Cairo:700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Cairo:700
IP
GET /css?family=Cairo:700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jan 2023 22:06:27 GMT
date: Sun, 15 Jan 2023 22:06:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Changa
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Changa
IP
GET /css?family=Changa HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://goforrewas.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jan 2023 22:06:27 GMT
date: Sun, 15 Jan 2023 22:06:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.70.16.242
162.0.231.38
93.184.220.29
23.36.77.32