urlquery - report: webmail.icloud-nc.us/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
webmail.icloud-nc.us (13)	0	No data	No data	199.79.63.155	Unknown ranking
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-27 05:29:57 UTC	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	35.160.97.225
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
r3.o.lencr.org (7)	344	No data	No data	23.36.76.226
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-27 05:29:56 UTC	34.102.187.140

Scan Date	Severity	Indicator	Comment
2022-11-27	2	webmail.icloud-nc.us/	Phishing
2022-11-27	2	webmail.icloud-nc.us/cPanel_magic_revision_1645739615/unprotected/cpanel/im (...)	Phishing
2022-11-27	2	webmail.icloud-nc.us/cPanel_magic_revision_1616517441/unprotected/cpanel/fo (...)	Phishing
2022-11-27	2	webmail.icloud-nc.us/cPanel_magic_revision_1616517441/unprotected/cpanel/fo (...)	Phishing
2022-11-27	2	webmail.icloud-nc.us/cPanel_magic_revision_1616517441/unprotected/cpanel/fo (...)	Phishing

Date	UQ / IDS / BL	URL	IP
2023-01-29 07:30:54 +0000	0 - 1 - 2	www.icloud-idfind-nc.server-redstore.com/expi (...)	199.79.63.155
2023-01-29 06:02:34 +0000	0 - 1 - 7	icloud-idfind-nc.com.tr/expire/index2.html	199.79.63.155
2023-01-28 22:48:37 +0000	0 - 1 - 7	icloud-idfind-nc.com.tr/expire/index2.html	199.79.63.155
2023-01-28 20:35:54 +0000	0 - 1 - 4	icloud-idfind-nc.server-redstore.com/expire/i (...)	199.79.63.155
2023-01-21 08:30:11 +0000	0 - 0 - 8	icloud.support-nc.us/	199.79.63.155

Date	UQ / IDS / BL	URL	IP
2023-02-05 06:55:45 +0000	0 - 0 - 1	syndicatedmetal.com/	199.79.62.147
2023-02-05 06:22:27 +0000	0 - 0 - 5	documented.in/ucc/g8Zld7NJOR.zip	204.11.59.195
2023-02-05 05:56:35 +0000	0 - 0 - 5	documented.in/ucc/8AKugjZ0d8.zip	204.11.59.195
2023-02-05 05:40:42 +0000	21 - 0 - 23	aquaflow.ae/usrsyhgd/ibxkey/Login.php?id=g567 (...)	208.91.199.118
2023-02-05 04:39:48 +0000	0 - 0 - 5	documented.in/ucc/9Jox7WWUSr.zip	204.11.59.195

Date	UQ / IDS / BL	URL	IP
2022-12-26 19:32:42 +0000	0 - 1 - 8	icloud-nc.us/	199.79.63.155
2022-11-28 11:15:31 +0000	0 - 0 - 4	icloud-nc.us/expire/index2.html	199.79.63.155
2022-11-28 07:01:42 +0000	0 - 0 - 8	icloud-nc.us/	199.79.63.155
2022-11-27 17:13:12 +0000	0 - 0 - 5	webmail.icloud-nc.us/	199.79.63.155
2022-10-06 09:25:56 +0000	0 - 0 - 5	icloud-nc.us/expire/index2.html	199.79.63.155

Date	UQ / IDS / BL	URL	IP
2023-01-29 16:37:11 +0000	0 - 2 - 0	webmail.waucquez.biz/	208.76.80.20
2023-01-26 05:04:42 +0000	0 - 0 - 5	webmail.bujicekonjic.ba/	144.76.117.59
2023-01-25 12:58:09 +0000	0 - 0 - 5	webmail.canrogroup.com/	199.250.209.133
2022-11-18 14:33:30 +0000	0 - 0 - 31	webmail.psdurres.com/	108.167.158.61
2022-11-14 00:42:49 +0000	0 - 0 - 31	webmail.protechasia.com/	103.58.102.38

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1" Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10417 Expires: Sun, 27 Nov 2022 20:06:38 GMT Date: Sun, 27 Nov 2022 17:13:01 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: cdbad2434b7d127a4fc769807a9dc3e7 Sha1: fa98cd9fc2309ab4423f33f683d17bdb17d76713 Sha256: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1443 Cache-Control: max-age=150135 Date: Sun, 27 Nov 2022 17:13:01 GMT Etag: "63833c71-1d7" Expires: Tue, 29 Nov 2022 10:55:16 GMT Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT Server: ECS (ska/F710) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 64b2a23eab6e5ae8c010ec7242be930c Sha1: 0673e4385ba01a5a245711bab96cafc34f765793 Sha256: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sun, 27 Nov 2022 16:19:23 GMT cache-control: public,max-age=3600 age: 3218 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: d130218d0e2841f39c99610fe1a2ab90 Sha1: 29fbe1e177ee55c7a61ae0a206afff271cf5f945 Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786" Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16034 Expires: Sun, 27 Nov 2022 21:40:15 GMT Date: Sun, 27 Nov 2022 17:13:01 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 71f9c681a82440fd55e76c780a20e55d Sha1: 3147768cfbcdd06e0c6e69684292e68e99917a80 Sha256: 5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: Qd+067DqQK3kGaSn9IOWZMxDo+/Mt39n/Puppvsc6+eOuzdToMR7p66l22U+qITWIwVfD+qamr8= x-amz-request-id: 9XXEHHG0GKNTKRX5 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sun, 27 Nov 2022 16:44:42 GMT age: 1699 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET / HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: webmail.icloud-nc.us/ FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: fd4a58f523d1a5d5f42773194391930fddedf1d1c94e03175b924599a871641e 199.79.63.155 HTTP/1.1 200 OK Content-Type: text/html; charset="utf-8" Date: Sun, 27 Nov 2022 17:13:01 GMT Server: Apache Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate, private, no-cache, no-store, must-revalidate, private X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Encoding: gzip Content-Length: 12291 Set-Cookie: webmailrelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=80 webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; HttpOnly; path=/; port=80 roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=80 roundcube_sessauth=expired; HttpOnly; domain=webmail.icloud-nc.us; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=80 Horde=expired; HttpOnly; domain=.webmail.icloud-nc.us; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=80 horde_secret_key=expired; HttpOnly; domain=.webmail.icloud-nc.us; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=80 Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=80 Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=80 PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=80 imp_key=expired; HttpOnly; domain=webmail.icloud-nc.us; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=80 roundcube_cookies=enabled; HttpOnly; expires=Mon, 27-Nov-2023 17:13:01 GMT; path=/; port=80 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (10609) Size: 12291 Md5: 070b811674b6b31b163d28c069b73627 Sha1: cfb31aa1cf719dad62d73011d3e710e6de339b63 Sha256: fd4a58f523d1a5d5f42773194391930fddedf1d1c94e03175b924599a871641e Alerts: Blocklists: - fortinet: Phishing
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sun, 27 Nov 2022 17:13:01 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /cPanel_magic_revision_1616517441/unprotected/cpanel/fonts/open_sans/open_sans.min.css HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://webmail.icloud-nc.us/ Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled	URL: webmail.icloud-nc.us/cPanel_magic_revision_1616517441/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: 26a4a01450dedc2a89f044cb13f782ac772d40e482f6b1d4e489cfbf37fcd675 199.79.63.155 HTTP/1.1 200 OK Content-Type: text/css Date: Sun, 27 Nov 2022 17:13:01 GMT Server: Apache Last-Modified: Tue, 23 Mar 2021 16:37:21 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:01 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Encoding: gzip Content-Length: 521 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text, with very long lines (6358), with no line terminators Size: 521 Md5: 998a96260c20518ea4b42e5e5f0e9840 Sha1: 139c90ddd51e3c5db2406962a385509261d98840 Sha256: 26a4a01450dedc2a89f044cb13f782ac772d40e482f6b1d4e489cfbf37fcd675
GET /cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://webmail.icloud-nc.us/ Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled	URL: webmail.icloud-nc.us/cPanel_magic_revision_1645742265/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: bc624be9800dee52dc6781834608d9ba9892937283d82e880b8494bf31917409 199.79.63.155 HTTP/1.1 200 OK Content-Type: text/css Date: Sun, 27 Nov 2022 17:13:01 GMT Server: Apache Last-Modified: Thu, 24 Feb 2022 22:37:45 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:01 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Encoding: gzip Content-Length: 32592 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive --- Additional Info --- Magic: ASCII text, with very long lines (35950) Size: 32592 Md5: 7b342a6916c929b2542a0b9697eda47f Sha1: 1c081c995237d5509ac04c00dac5727d8989d9b5 Sha256: bc624be9800dee52dc6781834608d9ba9892937283d82e880b8494bf31917409
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sun, 27 Nov 2022 17:11:12 GMT cache-control: public,max-age=3600 age: 109 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/webmail-logo.svg HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://webmail.icloud-nc.us/ Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled	URL: webmail.icloud-nc.us/cPanel_magic_revision_1645739615/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: 05ef0328e9690b0f9f0eac4b56d8bc244b018772965b5660bb0282c55a4d3cdd 199.79.63.155 HTTP/1.1 200 OK Content-Type: image/svg+xml Date: Sun, 27 Nov 2022 17:13:02 GMT Server: Apache Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:02 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Encoding: gzip Content-Length: 2399 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5359) Size: 2399 Md5: 55683be73ab3f06116b936a1611249a9 Sha1: 5731937f1605aa2315cc85e66033dfc5009c2762 Sha256: 05ef0328e9690b0f9f0eac4b56d8bc244b018772965b5660bb0282c55a4d3cdd Alerts: Blocklists: - fortinet: Phishing
GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/notice-error.png HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled	URL: webmail.icloud-nc.us/cPanel_magic_revision_1645739615/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: bcaf01928e5c7246ab0bb7e83f609b485a67a5e442d3dd94539a883c11fb70cd 199.79.63.155 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 27 Nov 2022 17:13:02 GMT Server: Apache Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:02 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 1026 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive --- Additional Info --- Magic: PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced\012- data Size: 1026 Md5: a3265cc598ae28633c060889e790f80c Sha1: 57530d6996c8f36711ef05681474b8f63d4184b3 Sha256: bcaf01928e5c7246ab0bb7e83f609b485a67a5e442d3dd94539a883c11fb70cd
GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/icon-username.png HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled	URL: webmail.icloud-nc.us/cPanel_magic_revision_1645739615/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: 05ce0f813e6236158fa1d115faba62cd2041aab1878cac0960a0f45575cece1e 199.79.63.155 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 27 Nov 2022 17:13:02 GMT Server: Apache Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:02 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 320 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive --- Additional Info --- Magic: PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data Size: 320 Md5: 07ff84f8c855e5fe9d510ff5c9a4b1e4 Sha1: 11c262053e2b9be57d1dba7cb3d916ef041a0e50 Sha256: 05ce0f813e6236158fa1d115faba62cd2041aab1878cac0960a0f45575cece1e
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6380 Cache-Control: 'max-age=158059' Date: Sun, 27 Nov 2022 17:13:02 GMT Last-Modified: Sun, 27 Nov 2022 15:26:42 GMT Server: ECS (ska/F710) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: a6fee11dfe1b88cd768a0ca3e2bd0c89 Sha1: 59cec9a44a4a92467678afe65f347f68641a2174 Sha256: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/icon-password.png HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled	URL: webmail.icloud-nc.us/cPanel_magic_revision_1645739615/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: a02998df88a6efb0baa526796b2b682ce9fdd6471ceb19170b326320f22f7053 199.79.63.155 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 27 Nov 2022 17:13:02 GMT Server: Apache Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:02 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 450 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive --- Additional Info --- Magic: PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data Size: 450 Md5: 7ac1cefcb7eab93c6d6981ecde6c1635 Sha1: 1523f8cb80ab19108549d0b7db31a58b71c05d39 Sha256: a02998df88a6efb0baa526796b2b682ce9fdd6471ceb19170b326320f22f7053
GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/notice-success.png HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled; timezone=Etc/UTC	URL: webmail.icloud-nc.us/cPanel_magic_revision_1645739615/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: cafbe3036533fe094931f5745f8cb9962a34409522e93d63ac8427acb9a02c79 199.79.63.155 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 27 Nov 2022 17:13:02 GMT Server: Apache Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:02 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 962 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive --- Additional Info --- Magic: PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced\012- data Size: 962 Md5: 0a0ec2a6468d4d1aa3fc2baa70271ac8 Sha1: a31fb01790aca8dc1976450e4234cb6ccc328956 Sha256: cafbe3036533fe094931f5745f8cb9962a34409522e93d63ac8427acb9a02c79
GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/notice-info.png HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled; timezone=Etc/UTC	URL: webmail.icloud-nc.us/cPanel_magic_revision_1645739615/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: 95f8a142dd96c310afeb75329ef504f162ab3102a81fc07f20b268361990f526 199.79.63.155 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 27 Nov 2022 17:13:02 GMT Server: Apache Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:02 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 976 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive --- Additional Info --- Magic: PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced\012- data Size: 976 Md5: 14146cf832470d9beca95a708a1d6f8d Sha1: d4b506f92876baea69409f3a78c4718757a53b33 Sha256: 95f8a142dd96c310afeb75329ef504f162ab3102a81fc07f20b268361990f526
GET /cPanel_magic_revision_1616517441/unprotected/cpanel/fonts/open_sans/OpenSans-Regular-webfont.woff HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1616517441/unprotected/cpanel/fonts/open_sans/open_sans.min.css Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled	URL: webmail.icloud-nc.us/cPanel_magic_revision_1616517441/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: 22e7a1b10c110072f5a0bfd16e2197a76b279ec879bcce8978fada1dc9ee5d40 199.79.63.155 HTTP/1.1 200 OK Content-Type: application/font-woff Date: Sun, 27 Nov 2022 17:13:02 GMT Server: Apache Last-Modified: Tue, 23 Mar 2021 16:37:21 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:02 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 22660 Keep-Alive: timeout=5, max=73 Connection: Keep-Alive --- Additional Info --- Magic: Web Open Font Format, TrueType, length 22660, version 1.0\012- data Size: 22660 Md5: 79515ad0788973c533405f7012dfeccd Sha1: 5092881fad2caffdc6bf71bdab1ea547b73d3564 Sha256: 22e7a1b10c110072f5a0bfd16e2197a76b279ec879bcce8978fada1dc9ee5d40 Alerts: Blocklists: - fortinet: Phishing
GET /cPanel_magic_revision_1616517441/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1616517441/unprotected/cpanel/fonts/open_sans/open_sans.min.css Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled	URL: webmail.icloud-nc.us/cPanel_magic_revision_1616517441/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: 26b216fadb2ffcd542ca56c2d84f9918f62e40de89bf88b4211fffacd2a4ad83 199.79.63.155 HTTP/1.1 200 OK Content-Type: application/font-woff Date: Sun, 27 Nov 2022 17:13:02 GMT Server: Apache Last-Modified: Tue, 23 Mar 2021 16:37:21 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:02 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 22908 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive --- Additional Info --- Magic: Web Open Font Format, TrueType, length 22908, version 1.0\012- data Size: 22908 Md5: 697574b47bcfdd2c45e3e63c7380dd67 Sha1: 4590722b795938e0b6ff1b99701d1abe37aeabef Sha256: 26b216fadb2ffcd542ca56c2d84f9918f62e40de89bf88b4211fffacd2a4ad83 Alerts: Blocklists: - fortinet: Phishing
GET /cPanel_magic_revision_1616517441/unprotected/cpanel/fonts/open_sans/OpenSans-Bold-webfont.woff HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Connection: keep-alive Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1616517441/unprotected/cpanel/fonts/open_sans/open_sans.min.css Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled	URL: webmail.icloud-nc.us/cPanel_magic_revision_1616517441/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: a0357cb694b5284870c77c0dbcaf33f238004800419288afde313317b0dbd0b7 199.79.63.155 HTTP/1.1 200 OK Content-Type: application/font-woff Date: Sun, 27 Nov 2022 17:13:02 GMT Server: Apache Last-Modified: Tue, 23 Mar 2021 16:37:21 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:02 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 22432 Keep-Alive: timeout=5, max=75 Connection: Keep-Alive --- Additional Info --- Magic: Web Open Font Format, TrueType, length 22432, version 1.0\012- data Size: 22432 Md5: 2e90d5152ce92858b62ba053c7b9d2cb Sha1: 8cf65f42a2a8c349ccd6ab63b6cbd17c96fd665c Sha256: a0357cb694b5284870c77c0dbcaf33f238004800419288afde313317b0dbd0b7 Alerts: Blocklists: - fortinet: Phishing
GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/warning.png HTTP/1.1 Host: webmail.icloud-nc.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled; timezone=Etc/UTC	URL: webmail.icloud-nc.us/cPanel_magic_revision_1645739615/u (...) FQDN: webmail.icloud-nc.us IP: 199.79.63.155 HASH: 7ecb82019606d891c5197d2f8ba24ec323d9b10a089facc82d089ff1ec3d399b 199.79.63.155 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 27 Nov 2022 17:13:02 GMT Server: Apache Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT Cache-Control: max-age=5184000, public Expires: Thu, 26 Jan 2023 17:13:02 GMT X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 1060 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive --- Additional Info --- Magic: PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced\012- data Size: 1060 Md5: a64b8c7407bf94cc4448cb210bb882e7 Sha1: a526cf52b2c5b6c2d0409b886de4aa968000fcd8 Sha256: 7ecb82019606d891c5197d2f8ba24ec323d9b10a089facc82d089ff1ec3d399b
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: Ee0IIjByIR3qo7zxltshkQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.160.97.225 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.160.97.225 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 0Ox7Jct3Fy6G0PxzuQHKb5VfWSs= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13450 Expires: Sun, 27 Nov 2022 20:57:13 GMT Date: Sun, 27 Nov 2022 17:13:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13450 Expires: Sun, 27 Nov 2022 20:57:13 GMT Date: Sun, 27 Nov 2022 17:13:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13450 Expires: Sun, 27 Nov 2022 20:57:13 GMT Date: Sun, 27 Nov 2022 17:13:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13450 Expires: Sun, 27 Nov 2022 20:57:13 GMT Date: Sun, 27 Nov 2022 17:13:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13450 Expires: Sun, 27 Nov 2022 20:57:13 GMT Date: Sun, 27 Nov 2022 17:13:03 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10199 x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4iF1VIAMF09g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ== via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Sat, 26 Nov 2022 21:51:41 GMT age: 69682 etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10199 Md5: 2cd887044e91d7ed0f1a8d7119ff7dd0 Sha1: ae8aa4ce6ddaccba771fe65446926b60fc5628da Sha256: bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 13049 x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cBsvpHDJoAMFhFQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0 x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: MA_O50Lu6RRAFJpzXmVXhkxvYazdX5Lhk2Qa5k9fYUhBta-IWpVT1g== via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 01:46:48 GMT age: 55575 etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13049 Md5: 1db6041a0bdb2319ae85afcc30caaeec Sha1: 3b0ec6a7188dadf986f72fda8110296d9abd6f35 Sha256: 05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F597d0b25-8af2-425a-be32-195ac8e4bc00.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a97ce7c911625345342731b96cf423ee36182e101e3039694a666d6508a702ef 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4374 x-amzn-requestid: 16fa9401-4b57-4300-9377-3a7d96de3a38 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cGB7uFWJIAMFfTg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637f16b1-3386c7b54d828c3b1393b9ce;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 07:01:05 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: v8Bdyk4SLN0eSy5Ogkr2SbQAHWnbvRZJg7CD6-Xdzv3RDNlBwfoBHQ== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 08:10:48 GMT age: 32535 etag: "4770f56d4d9489df43f33952e4bfa84d8e46414e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4374 Md5: 514b4077fad50ba782e4bbb2c95c6852 Sha1: 4770f56d4d9489df43f33952e4bfa84d8e46414e Sha256: a97ce7c911625345342731b96cf423ee36182e101e3039694a666d6508a702ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4803 x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4iFHoIAMF2-g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg== via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google date: Sat, 26 Nov 2022 21:51:37 GMT age: 69686 etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4803 Md5: cc0a257323f882caff067adb86d906e4 Sha1: cedf2f21be7cd366bd46055b62b5513db3011dfc Sha256: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5099 x-amzn-requestid: 57648043-7820-453d-9549-0f743b6c2557 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4jFBvoAMFl1w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-53b59d607b82c264180f469d;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: VsdLWuh4rCawI5V0YYGaHxEMl2YEVNgsbjfCwzDsrnCZhRK2FkCkVw== via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google date: Sat, 26 Nov 2022 21:51:41 GMT age: 69682 etag: "f2129466436cbbdd58abe42a47fb7af19eba58e6" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5099 Md5: 433875a1b1fef34e45f2d8ac344c07e3 Sha1: f2129466436cbbdd58abe42a47fb7af19eba58e6 Sha256: ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7380 x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4iEegIAMFeuQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google date: Sat, 26 Nov 2022 21:50:08 GMT age: 69775 etag: "97a135335f5b1b042adeb385718f8808cb78528b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7380 Md5: 76c00eceed956377d7469ef58b0815cb Sha1: 97a135335f5b1b042adeb385718f8808cb78528b Sha256: 81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=10417 

                                        
                                            
Expires: Sun, 27 Nov 2022 20:06:38 GMT 

                                        
                                            
Date: Sun, 27 Nov 2022 17:13:01 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    cdbad2434b7d127a4fc769807a9dc3e7

                                                Sha1:   fa98cd9fc2309ab4423f33f683d17bdb17d76713

                                                Sha256: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 16:19:23 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 3218 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    d130218d0e2841f39c99610fe1a2ab90

                                                Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945

                                                Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: Qd+067DqQK3kGaSn9IOWZMxDo+/Mt39n/Puppvsc6+eOuzdToMR7p66l22U+qITWIwVfD+qamr8= 

                                        
                                            
x-amz-request-id: 9XXEHHG0GKNTKRX5 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 16:44:42 GMT 

                                        
                                            
age: 1699 

                                        
                                            
last-modified: Thu, 10 Nov 2022 09:21:27 GMT 

                                        
                                            
etag: "9ebddc2b260d081ebbefee47c037cb28" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    9ebddc2b260d081ebbefee47c037cb28

                                                Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39

                                                Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sun, 27 Nov 2022 17:13:01 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css HTTP/1.1 

                                        
                                            
Host: webmail.icloud-nc.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://webmail.icloud-nc.us/ 

                                        
                                            
Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled

                                         199.79.63.155

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:13:01 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Last-Modified: Thu, 24 Feb 2022 22:37:45 GMT 

                                        
                                            
Cache-Control: max-age=5184000, public 

                                        
                                            
Expires: Thu, 26 Jan 2023 17:13:01 GMT 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Content-Length: 32592 

                                        
                                            
Keep-Alive: timeout=5, max=74 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (35950)

                                                Size:   32592

                                                Md5:    7b342a6916c929b2542a0b9697eda47f

                                                Sha1:   1c081c995237d5509ac04c00dac5727d8989d9b5

                                                Sha256: bc624be9800dee52dc6781834608d9ba9892937283d82e880b8494bf31917409

                                        
                                            GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/icon-username.png HTTP/1.1 

                                        
                                            
Host: webmail.icloud-nc.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css 

                                        
                                            
Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled

                                         199.79.63.155

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:13:02 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT 

                                        
                                            
Cache-Control: max-age=5184000, public 

                                        
                                            
Expires: Thu, 26 Jan 2023 17:13:02 GMT 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Content-Length: 320 

                                        
                                            
Keep-Alive: timeout=5, max=73 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   320

                                                Md5:    07ff84f8c855e5fe9d510ff5c9a4b1e4

                                                Sha1:   11c262053e2b9be57d1dba7cb3d916ef041a0e50

                                                Sha256: 05ce0f813e6236158fa1d115faba62cd2041aab1878cac0960a0f45575cece1e

                                        
                                            GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/icon-password.png HTTP/1.1 

                                        
                                            
Host: webmail.icloud-nc.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css 

                                        
                                            
Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled

                                         199.79.63.155

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:13:02 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT 

                                        
                                            
Cache-Control: max-age=5184000, public 

                                        
                                            
Expires: Thu, 26 Jan 2023 17:13:02 GMT 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Content-Length: 450 

                                        
                                            
Keep-Alive: timeout=5, max=75 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   450

                                                Md5:    7ac1cefcb7eab93c6d6981ecde6c1635

                                                Sha1:   1523f8cb80ab19108549d0b7db31a58b71c05d39

                                                Sha256: a02998df88a6efb0baa526796b2b682ce9fdd6471ceb19170b326320f22f7053

                                        
                                            GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/notice-info.png HTTP/1.1 

                                        
                                            
Host: webmail.icloud-nc.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css 

                                        
                                            
Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled; timezone=Etc/UTC

                                         199.79.63.155

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:13:02 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT 

                                        
                                            
Cache-Control: max-age=5184000, public 

                                        
                                            
Expires: Thu, 26 Jan 2023 17:13:02 GMT 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Content-Length: 976 

                                        
                                            
Keep-Alive: timeout=5, max=74 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   976

                                                Md5:    14146cf832470d9beca95a708a1d6f8d

                                                Sha1:   d4b506f92876baea69409f3a78c4718757a53b33

                                                Sha256: 95f8a142dd96c310afeb75329ef504f162ab3102a81fc07f20b268361990f526

                                        
                                            GET /cPanel_magic_revision_1645739615/unprotected/cpanel/images/warning.png HTTP/1.1 

                                        
                                            
Host: webmail.icloud-nc.us

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://webmail.icloud-nc.us/cPanel_magic_revision_1645742265/unprotected/cpanel/style_v2_optimized.css 

                                        
                                            
Cookie: webmailsession=%3aP9z_qsPjGYFxWM5F%2c94e18e1d727cd3ceeb0d0accdffaab13; roundcube_cookies=enabled; timezone=Etc/UTC

                                         199.79.63.155

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:13:02 GMT 

                                        
                                            
Server: Apache 

                                        
                                            
Last-Modified: Thu, 24 Feb 2022 21:53:35 GMT 

                                        
                                            
Cache-Control: max-age=5184000, public 

                                        
                                            
Expires: Thu, 26 Jan 2023 17:13:02 GMT 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Content-Length: 1060 

                                        
                                            
Keep-Alive: timeout=5, max=74 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   1060

                                                Md5:    a64b8c7407bf94cc4448cb210bb882e7

                                                Sha1:   a526cf52b2c5b6c2d0409b886de4aa968000fcd8

                                                Sha256: 7ecb82019606d891c5197d2f8ba24ec323d9b10a089facc82d089ff1ec3d399b

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13450 

                                        
                                            
Expires: Sun, 27 Nov 2022 20:57:13 GMT 

                                        
                                            
Date: Sun, 27 Nov 2022 17:13:03 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13450 

                                        
                                            
Expires: Sun, 27 Nov 2022 20:57:13 GMT 

                                        
                                            
Date: Sun, 27 Nov 2022 17:13:03 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13450 

                                        
                                            
Expires: Sun, 27 Nov 2022 20:57:13 GMT 

                                        
                                            
Date: Sun, 27 Nov 2022 17:13:03 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 13049 

                                        
                                            
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cBsvpHDJoAMFhFQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: MA_O50Lu6RRAFJpzXmVXhkxvYazdX5Lhk2Qa5k9fYUhBta-IWpVT1g== 

                                        
                                            
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 01:46:48 GMT 

                                        
                                            
age: 55575 

                                        
                                            
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   13049

                                                Md5:    1db6041a0bdb2319ae85afcc30caaeec

                                                Sha1:   3b0ec6a7188dadf986f72fda8110296d9abd6f35

                                                Sha256: 05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4803 

                                        
                                            
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cOo4iFHoIAMF2-g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg== 

                                        
                                            
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 26 Nov 2022 21:51:37 GMT 

                                        
                                            
age: 69686 

                                        
                                            
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4803

                                                Md5:    cc0a257323f882caff067adb86d906e4

                                                Sha1:   cedf2f21be7cd366bd46055b62b5513db3011dfc

                                                Sha256: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7380 

                                        
                                            
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cOo4iEegIAMFeuQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA== 

                                        
                                            
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 26 Nov 2022 21:50:08 GMT 

                                        
                                            
age: 69775 

                                        
                                            
etag: "97a135335f5b1b042adeb385718f8808cb78528b" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7380

                                                Md5:    76c00eceed956377d7469ef58b0815cb

                                                Sha1:   97a135335f5b1b042adeb385718f8808cb78528b

                                                Sha256: 81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61

URL	webmail.icloud-nc.us/
IP	199.79.63.155 (United States)
ASN	#394695 PUBLIC-DOMAIN-REGISTRY
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-27 17:13:12 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	5
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (8)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.79.63.155

Last 5 reports on ASN: PUBLIC-DOMAIN-REGISTRY

Last 5 reports on domain: icloud-nc.us

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (2)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (33)

Overview

Domain Summary (8)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.79.63.155

Last 5 reports on ASN: PUBLIC-DOMAIN-REGISTRY

Last 5 reports on domain: icloud-nc.us

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (2)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (33)

Network Intrusion Detection Systems