Report - 6oqwg.xyz/images/campaigns/creativity-2259840-16650422507566.png

Report Overview

Submitted URL
6oqwg.xyz/images/campaigns/creativity-2259840-16650422507566.png
IP
172.67.182.196
ASN
#13335 CLOUDFLARENET
Submitted
2022-10-11 19:38:29
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	658 B	1.5 kB	93.184.220.29
shavar.services.mozilla.com	3602	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	441 B	204 B	52.36.92.75
firefox-settings-attachments.cdn.mozilla.net	11509	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	400 B	796 kB	54.192.137.121
6oqwg.xyz	222442	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	715 B	5.1 kB	104.21.32.39
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.6 kB	7.1 kB	23.36.77.32
getpocket.cdn.mozilla.net	1369	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	423 B	47 kB	34.120.5.221
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.2 kB	18 kB	34.160.144.191
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	61 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	6.7 kB	66 kB	18.165.201.80
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	34.218.164.174

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (0)

HTTP Transactions (41)

	URL	IP	Response	Size
	6oqwg.xyz/images/campaigns/creativity-2259840-16650422507566.png	104.21.32.39	200 OK	3.0 kB
URL HTTP/1.1 6oqwg.xyz/images/campaigns/creativity-2259840-16650422507566.png IP 104.21.32.39:0 ASN #13335 CLOUDFLARENET File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced\012- data Size 3.0 kB (3029 bytes) Hash c4f9e18053164cbca458a4a5e6f15010 995431325a8e8d8ffeee0faf63cac971b3d6b9ec 5cd6533fed131bc10a3479e663f8d12c3b4443cc31bd458ec2472bfebc2861d0 HTTP Headers `GET /images/campaigns/creativity-2259840-16650422507566.png HTTP/1.1 Host: 6oqwg.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1` HTTP/1.1 200 OK Date: Tue, 11 Oct 2022 19:38:13 GMT Content-Type: image/png Content-Length: 3029 Connection: keep-alive CDN-PullZone: 283898 CDN-Uid: 10270df6-3a78-4ee3-9e7e-62f57a8521e8 CDN-RequestCountryCode: NO Cache-Control: public, max-age=31919000 ETag: "633e874a-bd5" Last-Modified: Thu, 06 Oct 2022 07:44:10 GMT CDN-ProxyVer: 1.02 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/06/2022 11:02:40 CDN-EdgeStorageId: 601 CDN-Status: 200 CDN-RequestId: b7a25ae5ef6e2f03a114c5eec530719b CDN-Cache: HIT CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lx1xvAHY017zyDLrP8MJN98v%2Bcx0P%2Fb0eNWFZv0pqevxCuRJHCa%2BNT7fbqqCQKXLFp5ePjokIGy7zox3WRCZT2J9CAKaP%2B%2F45XMdhYp0Y3Ml3vY%2BPjkpeU9S6DU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 758a0e0a688a0b4d-OSL alt-svc: h2=":443"; ma=60

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash e0602913f3d432ffbfaa654440972ee1 e5aaf31749e65875fd840091f9a3bba641de413d 5495ad212166703dcd1d17d7aa6ff4d1c40e73dfad703d24f00f60f35bc7d56c HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "5495AD212166703DCD1D17D7AA6FF4D1C40E73DFAD703D24F00F60F35BC7D56C" Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17631 Expires: Wed, 12 Oct 2022 00:32:04 GMT Date: Tue, 11 Oct 2022 19:38:13 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 85a4b7305ed5b8d544e77276bbe05dd3 9507fd7cf95a811d6b3248be48cf83d9c7e28ff2 1698c701c0e72646f771dbae0383623c72dfbfb82c535b07fd423599482067ed HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "1698C701C0E72646F771DBAE0383623C72DFBFB82C535B07FD423599482067ED" Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2900 Expires: Tue, 11 Oct 2022 20:26:33 GMT Date: Tue, 11 Oct 2022 19:38:13 GMT Connection: keep-alive`

	getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30	34.120.5.221	200 OK	47 kB
URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30 IP 34.120.5.221:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators Size 47 kB (46631 bytes) Hash 356d060a445730b4b478b5b6b3e98bb0 0d911806b4f515c14838f61f3d77140ee4085927 d62deddf09b5fea0f2bfc63f4e3f329be567b206dadbf5f1e7b463d98d4eae14 HTTP Headers `GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30 HTTP/1.1 Host: getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK server: nginx vary: Accept-Encoding content-location: global-recs.php tcn: choice x-frame-options: SAMEORIGIN status: 200 OK x-source: Pocket pragma: cache p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE" x-cache: Hit from cloudfront x-amz-cf-pop: SEA19-C1 x-amz-cf-id: 99l02OOBUHZig9mBQJ274KylGaK1hXPE9cN2tVtEH-Roq5tD1iMKyw== content-encoding: gzip via: 1.1 b838ef1ff22a4a994af82d5178c30e1c.cloudfront.net (CloudFront), 1.1 google date: Tue, 11 Oct 2022 19:27:45 GMT age: 628 content-type: application/json content-length: 46631 cache-control: s-maxage=900,public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash cf115053c2c98937c2d3c1bba367d815 dfcf225bde5123f0476e6b319823136fa77537f6 e5748cb4844096548cf4c2d8d5bee9e245035c4632ae1a59bfd3b2d99bd4cd9b HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "E5748CB4844096548CF4C2D8D5BEE9E245035C4632AE1A59BFD3B2D99BD4CD9B" Last-Modified: Mon, 10 Oct 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2410 Expires: Tue, 11 Oct 2022 20:18:23 GMT Date: Tue, 11 Oct 2022 19:38:13 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 48ca0beea419a9039591cf1aee5179e0 9e92629f505fcc07aab51221e8fe62197a23e307 630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: Kx/NJ1Wx1D28SHBnvdwfPYx2DzvD5gyiLKZvgtrlqMlzq3YkZOzIRMu5V0UK91mIjEzybn4MNB8= x-amz-request-id: EA05104NGGNFWB7J content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 11 Oct 2022 19:15:26 GMT age: 1367 last-modified: Wed, 11 May 2022 19:51:39 GMT etag: "48ca0beea419a9039591cf1aee5179e0" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Tue, 11 Oct 2022 19:38:13 GMT content-type: application/json content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	firefox.settings.services.mozilla.com/v1/	18.165.201.80	200 OK	939 B
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/ IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash 3f17af4e8a1739eda4a518039f4892f9 c3feba08ae7e8f57e0fe9bcd2ebedea6bda67cbb c485b09cad08b5233fe8753682faf59219fe0d18fcc34d90dc88fb0971295f5f HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After, Alert, Backoff, Content-Length, Content-Type Cache-Control: max-age=3600 Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Tue, 11 Oct 2022 19:08:48 GMT Expires: Tue, 11 Oct 2022 19:30:25 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 ed5bf73eea0876436de4cbcd6f6945e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: VBhHiVGThRThpw3t5_jVd8rDLlYgvE0PexIHdvP7PTSdjG9ikfTGNw== Age: 1765

	6oqwg.xyz/favicon.ico	104.21.32.39	200 OK	54 B
URL HTTP/1.1 6oqwg.xyz/favicon.ico IP 104.21.32.39:0 ASN #13335 CLOUDFLARENET File type ASCII text, with no line terminators Size 54 B (54 bytes) Hash 5094beace10d64d9404032cfd00bb4ba a91e77a682ced329a4ddd416ecf52a416f970b34 c1c2d8c65a91508e273e8daf1e91e219c9cdf37925e527db054b0b8a5ad0cad0 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: 6oqwg.xyz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://6oqwg.xyz/images/campaigns/creativity-2259840-16650422507566.png` HTTP/1.1 200 OK Date: Tue, 11 Oct 2022 19:38:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive CDN-PullZone: 283898 CDN-Uid: 10270df6-3a78-4ee3-9e7e-62f57a8521e8 CDN-RequestCountryCode: NO Cache-Control: public, max-age=31919000 CDN-ProxyVer: 1.02 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2022 16:39:07 CDN-EdgeStorageId: 864 CDN-Status: 200 CDN-RequestId: 8e518eb7b24a654d1d44a2dfd115ca7d CDN-Cache: HIT CF-Cache-Status: MISS Last-Modified: Tue, 11 Oct 2022 19:38:14 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gzKTGS9sjyLKLJLDwI8vQL7MnXCcrepKSsprue9hGI1X%2FNXO%2Fgg%2BWgRNlIJL7r8MwrHldx%2Bc4PCDjzZ6TnneYjHl7hzEfDv5ubbozo4ADPT5EL%2FHjtUuPiHBHpQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 758a0e109fc70b4d-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	18.165.201.80	200 OK	329 B
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT X-Content-Type-Options: nosniff Cache-Control: max-age=3600 Date: Tue, 11 Oct 2022 18:41:37 GMT Expires: Tue, 11 Oct 2022 19:38:49 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 133321d9ca8be95a19f574700824c0e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: FdM5C59n2SrC4FeRjYeR3ykdAEgcUj94sgQR6dWM6kGCf7CMtfEnIQ== Age: 3397

	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 1f0d6c338ed9d4905193ba60d97263de f27d6006caa3d009fd5ab5adc7f127be6a2274b7 d6cfd23fae11c5283f0ce76c8873b025a543ca909eb5b0e948ec3d2bb1fab71c HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5227 Cache-Control: 'max-age=158059' Content-Type: application/ocsp-response Date: Tue, 11 Oct 2022 19:38:14 GMT Last-Modified: Tue, 11 Oct 2022 18:11:07 GMT Server: ECS (ska/F70A) X-Cache: HIT Content-Length: 471`

	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 34c15fee665f03aab24038618bb2d9a7 6b90ea5a496581b83daf1764938d1db1a5a32bb4 93e99055eb4a94f808eed2fac338d6c480047c30a56498b2a65036a7d5bdea04 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5844 Cache-Control: 'max-age=158059' Content-Type: application/ocsp-response Date: Tue, 11 Oct 2022 19:38:14 GMT Last-Modified: Tue, 11 Oct 2022 18:00:50 GMT Server: ECS (ska/F6FD) X-Cache: HIT Content-Length: 471`

	shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2	52.36.92.75	200 OK	8 B
URL HTTP/1.1 shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2 IP 52.36.92.75:0 ASN #16509 AMAZON-02 File type ASCII text Size 8 B (8 bytes) Hash 29fc57841962e407cb50c1be60284bf7 ce968a77e2996da5eee8925182318f171ccdce47 ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b HTTP Headers `POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1 Host: shavar.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 773 Connection: close Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: none Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/octet-stream Date: Tue, 11 Oct 2022 19:38:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 8 Connection: Close`

	push.services.mozilla.com/	34.218.164.174	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 34.218.164.174:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: +gqe1oNpu7InjaEgfYROLg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: oK+TUaYbz2CZepJFnLVE0qJqLNA=`

	firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221665514636606%22	18.165.201.80	200 OK	4.6 kB
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221665514636606%22 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (21675), with no line terminators Size 4.6 kB (4575 bytes) Hash de95fd530ac5b6a59067395ca2dbfd53 82fb0db67265c04c9094958cca1297a9a92b8d09 52a0fabbed4b4349778eda50bfca4e28411c9785114ad0c4230f25dde2814306 HTTP Headers `GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221665514636606%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Alert, Content-Type, Content-Length, Retry-After, Backoff Cache-Control: max-age=3600 Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Tue, 11 Oct 2022 19:01:57 GMT Expires: Tue, 11 Oct 2022 20:01:57 GMT Last-Modified: Tue, 11 Oct 2022 18:57:16 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: br Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: 3_xGMZctxSdMZjQj0URbqvlBEkYhUE4R57rOejWcQu6HuNE2PZXNkg== Age: 2178

	firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1665491838201&_since=%221653914271178%22	18.165.201.80	200 OK	13 kB
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1665491838201&_since=%221653914271178%22 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators Size 13 kB (12955 bytes) Hash 596a0b2406286726da87670621bcc9bb 753bacccac553bd489fa59dd92b191f4dc33c32d 217d1472231491a730c6cb71002babcbe10cedd77ca004818fb19ca7cd10ccdb HTTP Headers `GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1665491838201&_since=%221653914271178%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Alert, Content-Type, Content-Length, Retry-After, Backoff Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Tue, 11 Oct 2022 12:37:18 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: br Cache-Control: max-age=3600 Date: Tue, 11 Oct 2022 18:43:25 GMT Expires: Tue, 11 Oct 2022 19:43:25 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: suAEikxkR9V0rM1ZIWZ7M1d8-sZS0CQlJoUWMRCmB5ZWkOQaVTWSjg== Age: 3290

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK x-amz-id-2: acQuxmwQ0rITlihiYFbqgu6fuSDlS1L1rwpONMLe5UKvK+t0zpVEq7/7JXtXgmG9sv4gZ2OE8mo= x-amz-request-id: 650AK6CBWD0C5DNK content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 11 Oct 2022 19:00:58 GMT age: 2237 last-modified: Fri, 30 Sep 2022 18:50:55 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	firefox.settings.services.mozilla.com/v1/	18.165.201.80	200 OK	939 B
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/ IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash 3f17af4e8a1739eda4a518039f4892f9 c3feba08ae7e8f57e0fe9bcd2ebedea6bda67cbb c485b09cad08b5233fe8753682faf59219fe0d18fcc34d90dc88fb0971295f5f HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After, Alert, Backoff, Content-Length, Content-Type Cache-Control: max-age=3600 Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Tue, 11 Oct 2022 19:08:48 GMT Expires: Tue, 11 Oct 2022 19:30:25 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: u5_R2c0bjpAUIpbSx9MdEYCai5ElN2Bfit0ZLldUmjZXbtBFu8fyXA== Age: 1767

	firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/67600448-6fc2-4f40-bd4a-8687d731734f.bin	54.192.137.121	200 OK	796 kB
URL HTTP/1.1 firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/67600448-6fc2-4f40-bd4a-8687d731734f.bin IP 54.192.137.121:0 ASN #16509 AMAZON-02 File type data Size 796 kB (795699 bytes) Hash 9b95765b0e26af76116a95a966d61354 3f7c1b40fc999b83f3696f455402e49ab484b027 34f969c8e082310785ec4262e2d5b58c919d4de856ffc64b3467507f83ac9571 HTTP Headers `GET /staging/addons-bloomfilters/67600448-6fc2-4f40-bd4a-8687d731734f.bin HTTP/1.1 Host: firefox-settings-attachments.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 795699 Connection: keep-alive Last-Modified: Mon, 27 Jun 2022 12:39:11 GMT x-amz-version-id: 9np1boOrxtHVWzMczpbX1a.N_ewQWHDF Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 11 Oct 2022 07:03:36 GMT ETag: "9b95765b0e26af76116a95a966d61354" X-Cache: Hit from cloudfront Via: 1.1 cd8f4ac94836dc54b056844b56c2bb70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C5 X-Amz-Cf-Id: ONSp3V-wNSte0lIaM8wQATbmYlUEttN9uw0l2i9DOwOhwl7P36OLzw== Age: 73781

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1665503091084&_since=%221654636467710%22	18.165.201.80	200 OK	5.0 kB
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1665503091084&_since=%221654636467710%22 IP 18.165.201.80:0 ASN #0 File type ASCII text, with very long lines (35260), with no line terminators Size 5.0 kB (4966 bytes) Hash 37e1df71ffbe3d63f365f0b62b22083a 780c9454315193edbac232fa386326946f52fdc3 21eaf85583ecdb016d10a36b1f30f0dc6504dc6518c48091b32cdbd1d7fdee66 HTTP Headers `GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1665503091084&_since=%221654636467710%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Backoff, Content-Length, Content-Type, Retry-After, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Tue, 11 Oct 2022 15:44:51 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: br Cache-Control: max-age=3600 Date: Tue, 11 Oct 2022 18:50:14 GMT Expires: Tue, 11 Oct 2022 19:48:39 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: kA3Yr3SYLNPC8cKPRYhN82VGKNVcKi5tOusAuRjr7wXN1dSyOpxX7Q== Age: 2881

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1665446464461&_since=%221654732864402%22	18.165.201.80	200 OK	12 kB
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1665446464461&_since=%221654732864402%22 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (58917), with no line terminators Size 12 kB (12245 bytes) Hash dbf9f7d37f58e320a05c91f85bb298b4 ca2028b9e2733a44f80a39ca9d0b35f4c3e52eda 234b7e6eb86db33f2825730d0380496f9cdb809b0580f5b30e8c4914c39e0c64 HTTP Headers `GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1665446464461&_since=%221654732864402%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After, Alert, Backoff, Content-Length, Content-Type Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Tue, 11 Oct 2022 00:01:04 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: br Cache-Control: max-age=3600 Date: Tue, 11 Oct 2022 19:01:08 GMT Expires: Tue, 11 Oct 2022 19:01:08 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: IGNZuLQgMMilRUhHQuQ3I2a0qH48pT-N4c-DAM94gMFTKcEPGo4h7Q== Age: 2227

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1662044085942&_since=%221622732735407%22	18.165.201.80	200 OK	5.9 kB
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1662044085942&_since=%221622732735407%22 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (20424), with no line terminators Size 5.9 kB (5859 bytes) Hash d5f358e1c4c24c5498506f822573411d 82a8bac76194d3124d20b855b59c4c3c8110f138 8c03f72cedd357bcf30f77be6493cbb9fea34b7faa0ab53922ba40ae6385b77f HTTP Headers `GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1662044085942&_since=%221622732735407%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Thu, 01 Sep 2022 14:54:45 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip Cache-Control: max-age=2592000 Date: Mon, 03 Oct 2022 22:05:46 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: h8kxCVTvhVeUBz-8ryuHJN82Yz2y3pZWz_9jetnWzotyKzctYptpUw== Age: 682349

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK x-amz-id-2: /Y0LFZThRyDojGb3GVw00GRHHLIJKEeMHE8fw+69dFANUaw+TE2HnVtgxM4Jq0C41WdBjMUsWMo= x-amz-request-id: 8XXYG7MVXQ87MWD2 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Tue, 11 Oct 2022 18:47:31 GMT age: 3044 last-modified: Sat, 10 Sep 2022 18:47:45 GMT etag: "6113f8408c59aebe188d6af273b90743" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1659924409785&_since=%221652712410939%22	18.165.201.80	200 OK	825 B
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1659924409785&_since=%221652712410939%22 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (1394), with no line terminators Size 825 B (825 bytes) Hash 323f63cea1e65bcba94765be51a8cad4 5ae1b62bce94b3c9de5cdf0bb3d61873e0667300 de2dfaadd3174377d4e4edb027b2abe3909fdfeb1537b4cbc1a56b700ce0be76 HTTP Headers `GET /v1/buckets/main/collections/password-rules/changeset?_expected=1659924409785&_since=%221652712410939%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Mon, 08 Aug 2022 02:06:49 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip Cache-Control: max-age=2592000 Date: Sun, 25 Sep 2022 09:31:21 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: gfjDieYPbdz4LRk2M2MR1wgX4fCMiI6dGAwquTRqxHiU6hb1zi-fjg== Age: 1418815

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 372301cc3e0ad3b9318a13a6ec327d30 9d34de85f08bf496e76a3577e0b23af5a2e06548 b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03" Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9815 Expires: Tue, 11 Oct 2022 22:21:51 GMT Date: Tue, 11 Oct 2022 19:38:16 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 372301cc3e0ad3b9318a13a6ec327d30 9d34de85f08bf496e76a3577e0b23af5a2e06548 b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03" Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9815 Expires: Tue, 11 Oct 2022 22:21:51 GMT Date: Tue, 11 Oct 2022 19:38:16 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 372301cc3e0ad3b9318a13a6ec327d30 9d34de85f08bf496e76a3577e0b23af5a2e06548 b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03" Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9815 Expires: Tue, 11 Oct 2022 22:21:51 GMT Date: Tue, 11 Oct 2022 19:38:16 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/websites-with-shared-credential-backends/changeset?_expected=1659924446436&_since=%221650898092205%22	18.165.201.80	200 OK	3.3 kB
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/websites-with-shared-credential-backends/changeset?_expected=1659924446436&_since=%221650898092205%22 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (8682), with no line terminators Size 3.3 kB (3280 bytes) Hash 43ca54322d55fb59979cb10bc0b30a3e e2c56532fbe8201e4e9e25ac1a1926e2de00fdb5 75f3f51896ab455cc6462a4010bfb3653bf01c4239dbbd92bb9a814267accad6 HTTP Headers `GET /v1/buckets/main/collections/websites-with-shared-credential-backends/changeset?_expected=1659924446436&_since=%221650898092205%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Mon, 08 Aug 2022 02:07:26 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip Cache-Control: max-age=2592000 Date: Fri, 30 Sep 2022 06:14:31 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: 31n-9OoCiOgsIgjxLlPqE_4jqfAb6ILZuzw7lnYfjztKNefcpAgmKA== Age: 998625

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 372301cc3e0ad3b9318a13a6ec327d30 9d34de85f08bf496e76a3577e0b23af5a2e06548 b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03" Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9815 Expires: Tue, 11 Oct 2022 22:21:51 GMT Date: Tue, 11 Oct 2022 19:38:16 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 372301cc3e0ad3b9318a13a6ec327d30 9d34de85f08bf496e76a3577e0b23af5a2e06548 b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03" Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9815 Expires: Tue, 11 Oct 2022 22:21:51 GMT Date: Tue, 11 Oct 2022 19:38:16 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg	34.120.237.76	200 OK	12 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 12 kB (11800 bytes) Hash 6e9aa9808428e5fd81ac9d61d6f7c708 3a8d76badce50dd98938885082dcb6e30363ae88 d8f7c48a1cbe04af2f7e0455d1ef7af9b63506b9ae343ebf14ece8689bb06bf6 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0583d755-2f5b-458f-86f0-774b9909eb6f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 11800 x-amzn-requestid: 5f2ce4dd-0df8-4df7-a12d-e6fffd622752 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZnTQHGADIAMFXfg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-633f98cd-5044665325e5d64975c1ff0c;Sampled=0 x-amzn-remapped-date: Fri, 07 Oct 2022 03:11:09 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: LhwkinWopo6RX-yo5_35HWL9S2dGpdi7rAiwVWLxUicaHfHW3VF7DQ== via: 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google date: Mon, 10 Oct 2022 21:42:24 GMT age: 78952 etag: "3a8d76badce50dd98938885082dcb6e30363ae88" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ea1c33c-766b-4b55-98a5-0a22380c61ce.jpeg	34.120.237.76	200 OK	6.6 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ea1c33c-766b-4b55-98a5-0a22380c61ce.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.6 kB (6645 bytes) Hash 1a8720e1bfd92ce7ccfeb8ab6ca2477a 1277a8a73b2fbf48562a7f767c3219d836b1faa9 61cfaa0a0338ae710735fab66822d8227adeb6a8bc4035686fae4a4de6247f1e HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ea1c33c-766b-4b55-98a5-0a22380c61ce.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6645 x-amzn-requestid: 6e75c182-93bc-4339-a679-b069f78a397c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZzuQ0H3qoAMFi5w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-634490d1-4e134a93174cbf3559bea75c;Sampled=0 x-amzn-remapped-date: Mon, 10 Oct 2022 21:38:25 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 2T5ArGyU86KvuyKtp_G0XC9MaZQWS2luBYlIKcQRWNeeUjqcmQgMSA== via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google date: Mon, 10 Oct 2022 21:42:38 GMT age: 78938 etag: "1277a8a73b2fbf48562a7f767c3219d836b1faa9" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F647e8146-dad8-449f-a0ea-efe8d7b14e99.jpeg	34.120.237.76	200 OK	6.0 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F647e8146-dad8-449f-a0ea-efe8d7b14e99.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.0 kB (5957 bytes) Hash 6943f4735bdb3eaf396cd0edbd101dae 3be209d8b74abe0d12033cf6149da04eb9e1a116 7578a8981216adc59909baf4e41ef4044d5a592e6dc7f80f4fa8f5f1cc1b282f HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F647e8146-dad8-449f-a0ea-efe8d7b14e99.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 5957 x-amzn-requestid: e0f7c754-77bd-402d-9a94-424632468a2f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Zt6HoGFvoAMFoHw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63423d63-32c98bad73afd14a4ee28593;Sampled=0 x-amzn-remapped-date: Sun, 09 Oct 2022 03:17:55 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: Pq_yqwFfzr5QIsZKy1h6qtbDul9dGXzapXaLy9NOhGRMgLNxSnj6vQ== via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google date: Tue, 11 Oct 2022 03:39:45 GMT age: 57511 etag: "3be209d8b74abe0d12033cf6149da04eb9e1a116" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ade344-507f-44c8-8fe3-b03ac965aee2.jpeg	34.120.237.76	200 OK	7.7 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ade344-507f-44c8-8fe3-b03ac965aee2.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 7.7 kB (7674 bytes) Hash ff8cfe3904cca89e3bdfa8186ae382ba 0b9dce744f5facad9a0a136d81cf24e928211856 a6f0925a9666a43d018c05d717310f57b86316290fb4a7cdd309c35842e557a1 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ade344-507f-44c8-8fe3-b03ac965aee2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 7674 x-amzn-requestid: 126f9400-fa43-413b-b496-338908efb777 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZeqScHUVoAMFrRg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-633c240f-1b7cff3e3415299a4d17e19e;Sampled=0 x-amzn-remapped-date: Tue, 04 Oct 2022 12:16:15 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: BjBiRKpvs2LQznegxhvMFrczSZGWXGSMvk3bxR8UPpcthRUUA2eTBg== via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google date: Mon, 10 Oct 2022 21:56:18 GMT age: 78118 etag: "0b9dce744f5facad9a0a136d81cf24e928211856" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a938ec-0f85-4cc4-b114-6a3bb049c111.jpeg	34.120.237.76	200 OK	11 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a938ec-0f85-4cc4-b114-6a3bb049c111.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 11 kB (11336 bytes) Hash 9e6761274cf8c2ed62e317e310f74ac3 32b3631be51d3385f061fee29e41ed28fad4b914 45d68ffebd269cae06ae471a11a128c32070367db85f525b81df4164f510adea HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a938ec-0f85-4cc4-b114-6a3bb049c111.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 11336 x-amzn-requestid: 2f64751f-13d2-49c3-85c4-fb0f28186a37 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Zzt8mFh7IAMF_lA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63449050-100b2d49411d4bed369655c1;Sampled=0 x-amzn-remapped-date: Mon, 10 Oct 2022 21:36:16 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: lss2UdzBjP4PysNdrrEsK0WX20WfoKkbHuhcPzL6WWyyTXSynpXJDA== via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google date: Mon, 10 Oct 2022 22:07:13 GMT age: 77463 etag: "32b3631be51d3385f061fee29e41ed28fad4b914" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc6dbf06-fc04-4aa0-be3e-1b1f5a988e0f.jpeg	34.120.237.76	200 OK	11 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc6dbf06-fc04-4aa0-be3e-1b1f5a988e0f.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 11 kB (10795 bytes) Hash 3a7910c19b8c04b1c7a9a03949dc54b8 40b0931f4705cc826564bd29418d17edbed84d7d 1f14b664a3587ad9b73b3d5bc37a670900622c467287f9a0dfad1f8bdf69606f HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc6dbf06-fc04-4aa0-be3e-1b1f5a988e0f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10795 x-amzn-requestid: 8efcb814-aa05-476a-b66a-161185920ed8 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Zj_dQHvHoAMFy_A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-633e45ee-7eb4a30a5d0b102845ba50d6;Sampled=0 x-amzn-remapped-date: Thu, 06 Oct 2022 03:05:18 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: sYu22nP23ebL-YER7jAfQOGRddML3giG_gWSfdHy_4NAeAY2--QIsA== via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google date: Mon, 10 Oct 2022 20:55:37 GMT age: 81759 etag: "40b0931f4705cc826564bd29418d17edbed84d7d" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1661199949574&_since=%221648132005528%22	18.165.201.80	200 OK	3.4 kB
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1661199949574&_since=%221648132005528%22 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (14029), with no line terminators Size 3.4 kB (3396 bytes) Hash e7e74647424d9c39a17385a707c87ffd 880314757d8539e3b7ae6512ed941b8c4f6540c5 d7bd771e4a69a08d014f8dae26bee3b39f560054ea3ee2d0d1ce9504949e11b4 HTTP Headers `GET /v1/buckets/main/collections/search-config/changeset?_expected=1661199949574&_since=%221648132005528%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Mon, 22 Aug 2022 20:25:49 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip Cache-Control: max-age=2592000 Date: Sun, 25 Sep 2022 14:46:16 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: _6VRbSx257mm7Sv5uscY69A1qmg9MGOXGmdrI_PIC-fCWs7fuGHl9w== Age: 1399920

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1659547595259&_since=%221653578606314%22	18.165.201.80	200 OK	1.4 kB
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1659547595259&_since=%221653578606314%22 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (3677), with no line terminators Size 1.4 kB (1410 bytes) Hash e8d5876bd017ba0daf99ebe09fa1a30f 9862568db8fd0c511dc7a9f8ed78ca28b4098d39 9dd4dc96f76b9e0189ede9d0c36dcbd5fff3fac2e7ddef8d12242275c8b81e32 HTTP Headers `GET /v1/buckets/main/collections/cfr/changeset?_expected=1659547595259&_since=%221653578606314%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Wed, 03 Aug 2022 17:26:35 GMT X-Content-Type-Options: nosniff Content-Encoding: br Date: Tue, 11 Oct 2022 19:07:23 GMT Cache-Control: max-age=3600 Expires: Tue, 11 Oct 2022 19:55:08 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: 7pA09vXtndWZ7TjzfI3sEZjC6_LNgSZqgxV6VhheJeP6-qn1saH3zA== Age: 1860

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258	18.165.201.80	200 OK	682 B
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (682), with no line terminators Size 682 B (682 bytes) Hash 2cf4438c61861d28e0f309366d09a530 f371c6c6cdafc75af9ab2df59a7f293c94e988da 6fd07a9b7155edc63c67a9bc41e7ea569807601c21a6d9635f488162873c4933 HTTP Headers `GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Content-Length: 682 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Backoff, ETag, Expires, Cache-Control, Last-Modified, Content-Length, Content-Type, Pragma, Retry-After, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Tue, 04 Oct 2022 16:36:55 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store Date: Tue, 11 Oct 2022 19:35:03 GMT ETag: "1664901415997" X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: lofg17JpEmtWaoFTyp25VQB8IvH6G3tGL7AfD8nE7Yu3d4Ozanjbmg== Age: 193

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1656585893704&_since=%221649762862679%22	18.165.201.80	200 OK	959 B
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1656585893704&_since=%221649762862679%22 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (1710), with no line terminators Size 959 B (959 bytes) Hash 7f8d60f2a2ddf1651425be89890b444b cf38b90181533f4349a971304041d985130844bc 9d4dc14a2c3acf67d6202f7660eec8195f820565902ae4ac776f4e5a86a6295a HTTP Headers `GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1656585893704&_since=%221649762862679%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Thu, 30 Jun 2022 10:44:53 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: gzip Cache-Control: max-age=2592000 Date: Thu, 22 Sep 2022 16:58:34 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: fEmUpoVifTtIIJhNoPkynHeCDIpkCIRellN9P6CDVArLdWPGNZ4txA== Age: 1651182

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1657747510534&_since=%221654266643527%22	18.165.201.80	200 OK	1.1 kB
URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1657747510534&_since=%221654266643527%22 IP 18.165.201.80:0 ASN #0 File type JSON data\012- , ASCII text, with very long lines (2194), with no line terminators Size 1.1 kB (1080 bytes) Hash 4286df03a653e5b403e88a8d28933306 8f974648aef7d271443707ce3a6eba8d9a117872 16e99009a0917eedd380140055d06b29d6709bd469d694d078c013f7c104367a HTTP Headers `GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1657747510534&_since=%221654266643527%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Wed, 13 Jul 2022 21:25:10 GMT X-Content-Type-Options: nosniff Content-Encoding: gzip Cache-Control: max-age=2592000 Date: Sun, 02 Oct 2022 13:32:31 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1a6cd18714da9809fa8cb07ad66fd4f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P3 X-Amz-Cf-Id: 9emmpMRys192YNsdDdvB0oCDZxOZADnUVbFQZLcxvXklKifRJcby3A== Age: 799544

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (0)

HTTP Transactions (41)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size