Report - capactmicroftmas.dns.army/MAIL903-01921/?hash=redacted@slurpmail.net

Report Overview

Submitted URL
capactmicroftmas.dns.army/MAIL903-01921/?hash=redacted@slurpmail.net
IP
20.169.54.120
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2022-10-18 21:54:19
Access
Website Title
Final URL
Tags
None
urlquery detections
DynDNS domain detected

Detections

urlquery
13
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-09T10:04:36Z	3.2 kB	88 kB	34.120.237.76
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-09T05:09:18Z	758 B	2.8 kB	143.204.55.27
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-09T05:09:49Z	401 B	5.8 kB	34.160.144.191
capactmicroftmas.dns.army	unknown	2022-09-29T17:46:22Z	2022-10-19T08:22:39Z	4.7 kB	486 kB	20.169.54.120
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-09T05:09:48Z	321 B	229 B	34.117.237.239
logincdn.msauth.net	2330	2019-04-23T03:13:28Z	2023-03-09T11:34:46Z	450 B	1.3 kB	192.229.221.185
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-09T05:09:13Z	594 B	127 B	54.191.251.76
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-09T05:09:05Z	2.0 kB	5.3 kB	23.36.76.226
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-09T05:09:50Z	662 B	1.4 kB	142.250.74.3
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-09T11:52:10Z	329 B	797 B	93.184.220.29
fonts.googleapis.com	8877	2013-06-10T22:14:26Z	2023-03-09T12:17:45Z	385 B	1.7 kB	142.250.74.10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-10-18	medium	capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php	Outlook

PhishTank

Scan Date	Severity	Indicator	Alert
2022-09-30	medium	capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php	Other

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-10-18	medium	dns.army	Sinkholed
2022-10-18	medium	dns.army	Sinkholed
2022-10-18	medium	dns.army	Sinkholed
2022-10-18	medium	dns.army	Sinkholed
2022-10-18	medium	dns.army	Sinkholed
2022-10-18	medium	dns.army	Sinkholed
2022-10-18	medium	dns.army	Sinkholed
2022-10-18	medium	dns.army	Sinkholed
2022-10-18	medium	dns.army	Sinkholed
2022-10-18	medium	dns.army	Sinkholed
2022-10-18	medium	dns.army	Sinkholed

JavaScript (7)

	URL	Size	First Seen	Last Seen
	capactmicroftmas.dns.army/MAIL903-01921/acesso/js/bootstrap.min.js	37 kB	2023-03-07	2024-04-25
Pretty URL capactmicroftmas.dns.army/MAIL903-01921/acesso/js/bootstrap.min.js IP 20.169.54.120 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:12:00 Last Seen2024-04-25 07:47:08 Times Seen199 Hash f500d05d91d5d52ffe41405dee91e646 6e548dc121181aeba4342634f95616950b84f49c 2f9f71d96d253ecafb0d73e4cc37e7a4c843cc0d082c757c80cc5de8a0edc2df Loading...

	capactmicroftmas.dns.army/MAIL903-01921/acesso/js/jquery-vv.min.js	31 kB	2023-03-07	2024-05-03
Pretty URL capactmicroftmas.dns.army/MAIL903-01921/acesso/js/jquery-vv.min.js IP 20.169.54.120 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:12:00 Last Seen2024-05-03 04:51:51 Times Seen232 Hash 48ee178e3149e6218973a42f6c334e3b 53c0da9cb7d5cd77cc0ad91c1b756b484381ac73 6bc21e325f9e92c5571194ff99852960f3e85876f69aaf05579c1e83ea2a0422 Loading...

	capactmicroftmas.dns.army/MAIL903-01921/acesso/js/verificarUsuario.js	602 B	2023-03-07	2023-11-25
Pretty URL capactmicroftmas.dns.army/MAIL903-01921/acesso/js/verificarUsuario.js IP 20.169.54.120 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:12:00 Last Seen2023-11-25 20:05:34 Times Seen140 Hash 6b9feb2872a28ab5d27febf7db3f43b8 3ab6c48186a8bf14fa9c88a67d80fb0ce7a0838d 49ef4eeff12b3edbfa4ba3f94939d95526ff7a634eb23a64a69791819abb8175 Loading...

	capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php	2 B	2023-03-07	2024-05-10
Pretty URL capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php IP 20.169.54.120 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:30 Last Seen2024-05-10 04:58:16 Times Seen13504 Hash e1c06d85ae7b8b032bef47e42e4c08f9 71853c6197a6a7f222db0f1978c7cb232b87c5ee 75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070 Loading...

	capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php	262 B	2023-03-07	2023-03-10
Pretty URL capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php IP 20.169.54.120 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:44:26 Last Seen2023-03-10 11:21:42 Times Seen1 Hash f2f259787a719907311b28bdd1c633c8 94b3b50df3b9c9c635dd72716cd547f93c3de126 b239ca5ff8ffa1762fda796882eeabc9f6ed26b9ec6746841b4e883461d8e8af Loading...

	capactmicroftmas.dns.army/MAIL903-01921/?hash=redacted@slurpmail.net	30 B	2023-03-07	2023-03-26
Pretty URL capactmicroftmas.dns.army/MAIL903-01921/?hash=redacted@slurpmail.net IP 20.169.54.120 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:12:00 Last Seen2023-03-26 09:19:58 Times Seen2 Hash f358c81eee4342fb831cf809b5a7d368 7219469ee8f7596c67e9f0037d5083f460deceab ac3590813c2fdde036a2b514be36f3a79765a667528a7a17652ee8b62f36780b Loading...

		Size	First Seen	Last Seen
	#1 Eval - 28767afc3461c1c8d1656fbd8732f257	46 kB	2023-03-07	2024-05-03
Pretty Observations First Seen2023-03-07 12:11:04 Last Seen2024-05-03 04:51:50 Times Seen546 Hash 28767afc3461c1c8d1656fbd8732f257 b5666bad2ff4b9b86b730e5a540f7bfb035e76ec 0f2f23d8954a30fdc9c4246587091ceca7d63588479e6cd7e59152779cb259ac Loading...

HTTP Transactions (34)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.27

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.27:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 18 Oct 2022 21:51:31 GMT
Expires: Tue, 18 Oct 2022 22:37:45 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: J_omINo5Le64Y128S4bprQHpMmytFEPBkMZN6Yz5hq7B6fT6fCSihw==
Age: 156

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
10ab470535c002d333b4f27d38b51091
ed3b0850c5d75881de410f7e8ca35e012e38bd38
31d6655d048ec8a62e00125766fea65cde04beae0b11f12ce7f722c9a5f7e232

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "31D6655D048EC8A62E00125766FEA65CDE04BEAE0B11F12CE7F722C9A5F7E232"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12328
Expires: Wed, 19 Oct 2022 01:19:35 GMT
Date: Tue, 18 Oct 2022 21:54:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
533e1d53f291993ed5886f88a85c6e55
eb4396e8422f71168d32ac6ff3ef49496f625e62
0d1b73b2a228fe76bf14688e603741025a40803971e05570f873b28788334b33

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D1B73B2A228FE76BF14688E603741025A40803971E05570F873B28788334B33"
Last-Modified: Mon, 17 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7843
Expires: Wed, 19 Oct 2022 00:04:50 GMT
Date: Tue, 18 Oct 2022 21:54:07 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: fPEw39VpymBzR5DZbJdBrMWVYFe2zj9mSzOVYYAp2/+NpAiiS+OaSmFOIlnvL4S+D3/C74ds1ro=
x-amz-request-id: 032MV92QT2P5AT2J
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 18 Oct 2022 21:36:02 GMT
age: 1085
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

capactmicroftmas.dns.army/MAIL903-01921/?hash=redacted@slurpmail.net

20.169.54.120

200 OK

89 B

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/?hash=redacted@slurpmail.net
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
89 B (89 bytes)
Hash
271c2620bcf656c079e714538d93e01b
eb9636ac86e50dd3855c68add07227f79ed80cff
b3315701a835e36be5f5aa2dcaaa58ffbc3c059093aad665deaac57d608f4edd

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected

HTTP Headers

GET /MAIL903-01921/?hash=redacted@slurpmail.net HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 21:54:07 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 89
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 18 Oct 2022 21:54:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

capactmicroftmas.dns.army/MAIL903-01921/acesso/

20.169.54.120

200 OK

101 B

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
101 B (101 bytes)
Hash
0cac56be84ee5996d59dd59bfbac63a9
b10fdc7e242ddd38a10b58903acafe6578ab7c90
aa9de99a061451d5fa00d7f044debf726cbc54cc066004349608bc523f4b75ca

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
quad9	Sinkholed

HTTP Headers

GET /MAIL903-01921/acesso/ HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/MAIL903-01921/?hash=redacted@slurpmail.net
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 21:54:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 101
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php

20.169.54.120

200 OK

1.8 kB

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (916), with CRLF line terminators
Size
1.8 kB (1755 bytes)
Hash
c2787e46dece10483feb2bc0ef7944df
ff87c9f2a56d56d5c903bf2c052c594a8c8ca69b
aa365f96fcb39cd809c17aa74651e0d6fa5f8ffbce92f60c5fe578f1a5a43276

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
openphish	Outlook
phishtank	Other
quad9	Sinkholed

HTTP Headers

GET /MAIL903-01921/acesso/loginsaltent.php HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 21:54:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1755
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.27

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.27:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 18 Oct 2022 21:43:40 GMT
Cache-Control: max-age=3600
Expires: Tue, 18 Oct 2022 21:54:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dN5bXNpU9WlqttBpmzQjDoEKEH2wpptd3zyLT471vyjdN7_p-lP_MQ==
Age: 628

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
80f58eb695988bf482ace850ddfc24bd
6a432d1e9a2b461b2d96456baa813b959ba7da29
f0631022cbeeb1204a8fbfe188d8c4d3f687e06bb76bfed3cee4019db294cfcc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 21:54:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

capactmicroftmas.dns.army/MAIL903-01921/acesso/css/bootstrap-theme.min.css

20.169.54.120

200 OK

2.7 kB

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/css/bootstrap-theme.min.css
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (23189), with CRLF line terminators
Size
2.7 kB (2657 bytes)
Hash
c05801d60522a49dba185c50979f4e67
e96615fad360d25cdab5c97e45c9c542050694ea
e608041ebe46445007a76b02b8bf75ac7c39974ae9d13090d72b02a5c3430ecd

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
quad9	Sinkholed

HTTP Headers

GET /MAIL903-01921/acesso/css/bootstrap-theme.min.css HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php

HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 21:54:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Wed, 28 Sep 2022 14:33:28 GMT
ETag: "5aca-5e9bda4f25738-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2657
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
80f58eb695988bf482ace850ddfc24bd
6a432d1e9a2b461b2d96456baa813b959ba7da29
f0631022cbeeb1204a8fbfe188d8c4d3f687e06bb76bfed3cee4019db294cfcc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 21:54:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
c9b278637bdca251f78b46e4a0850473
a48fe5095fc27af1c6b6628149d9e8f655295621
eea38f271e134a85a7b586631a8831888ab81f0edb33120b26bd35cdfa032e52

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6592
Cache-Control: max-age=129749
Content-Type: application/ocsp-response
Date: Tue, 18 Oct 2022 21:54:08 GMT
Etag: "634e5e95-1d7"
Expires: Thu, 20 Oct 2022 09:56:37 GMT
Last-Modified: Tue, 18 Oct 2022 08:06:45 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

capactmicroftmas.dns.army/MAIL903-01921/acesso/js/bootstrap.min.js

20.169.54.120

200 OK

9.8 kB

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/js/bootstrap.min.js
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (32033), with CRLF line terminators
Size
9.8 kB (9756 bytes)
Hash
ee63f3a8651255cb7a79eaca8ff095f8
90f73043c203177a3f9bef40cc0e1e83d14160a0
6b67bf28769c65472ecb2efd2a51aad5a6cdddcf68993b14a2b82e92cbbefa2c

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
quad9	Sinkholed

HTTP Headers

GET /MAIL903-01921/acesso/js/bootstrap.min.js HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php

HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 21:54:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Wed, 28 Sep 2022 14:34:03 GMT
ETag: "9039-5e9bda6ff6bc5-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9756
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

capactmicroftmas.dns.army/MAIL903-01921/acesso/css/bootstrap.min.css

20.169.54.120

200 OK

20 kB

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/css/bootstrap.min.css
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (65536), with no line terminators
Size
20 kB (19615 bytes)
Hash
0f3d5e959c4109846ffed09bcf9f8ecd
2ac8e443beab5044bf007856c440a70f51b71334
710370001e18743a4e681de1daa37fa01faa5c0fe325993cfeec64e229d80fd7

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
quad9	Sinkholed

HTTP Headers

GET /MAIL903-01921/acesso/css/bootstrap.min.css HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php

HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 21:54:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Wed, 28 Sep 2022 14:33:30 GMT
ETag: "1d878-5e9bda50dce66-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19615
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

capactmicroftmas.dns.army/MAIL903-01921/acesso/js/verificarUsuario.js

20.169.54.120

200 OK

330 B

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/js/verificarUsuario.js
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text
Size
330 B (330 bytes)
Hash
ab47f9ac911c68abf9d9bcd8fcd55c94
b0a7fb172bbf017dd7df99178185b773670c7711
a944abbffe2785e6aafb17b9cb7bafef398294a7bfc5db8e6b5d67c2974dd602

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
quad9	Sinkholed

HTTP Headers

GET /MAIL903-01921/acesso/js/verificarUsuario.js HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php

HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 21:54:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Wed, 28 Sep 2022 14:34:06 GMT
ETag: "25a-5e9bda72ed848-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 330
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

capactmicroftmas.dns.army/MAIL903-01921/acesso/js/jquery-vv.min.js

20.169.54.120

200 OK

16 kB

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/js/jquery-vv.min.js
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (30775), with CRLF line terminators
Size
16 kB (15662 bytes)
Hash
3697b245f370ad57bb347d40c5bb9675
368d145150c1374a3ef896da267db795353bd0c5
892322f36476852cf8cd8b09530919098ee9d27483bb5dc2d0fd558848cc255e

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
quad9	Sinkholed

HTTP Headers

GET /MAIL903-01921/acesso/js/jquery-vv.min.js HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php

HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 21:54:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Wed, 28 Sep 2022 14:34:04 GMT
ETag: "7943-5e9bda70b623e-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 15662
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

logincdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg

192.229.221.185

200 OK

621 B

URL HTTP/2
logincdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
IP
192.229.221.185:0
ASN
#15133 EDGECAST

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1592), with no line terminators
Size
621 B (621 bytes)
Hash
4761405717e938d7e7400bb15715db1e
76fed7c229d353a27db3257f5927c1eaf0ab8de9
f7ed91a1dab5bb2802a7a3b3890df4777588ccbe04903260fba83e6e64c90ddf

HTTP Headers

GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding
age: 11048765
cache-control: public, max-age=31536000
content-md5: R2FAVxfpONfnQAuxVxXbHg==
content-type: image/svg+xml
date: Tue, 18 Oct 2022 21:54:09 GMT
etag: 0x8D8852A7FCCA219
last-modified: Tue, 10 Nov 2020 03:41:25 GMT
server: ECAcc (ska/F695)
vary: Accept-Encoding
x-cache: HIT
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: b38c6328-201e-007d-0dbf-7ed1d0000000
x-ms-version: 2009-09-19
content-length: 621
X-Firefox-Spdy: h2

push.services.mozilla.com/

54.191.251.76

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.191.251.76:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OUjNqnc069/RjJk7QLJIQQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lRoPcP3UW9THQjWbH8SB6Y4WmfE=

capactmicroftmas.dns.army/MAIL903-01921/acesso/img/microsoft_logo.svg

20.169.54.120

200 OK

3.7 kB

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/img/microsoft_logo.svg
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3651), with no line terminators
Size
3.7 kB (3651 bytes)
Hash
ee5c8d9fb6248c938fd0dc19370e90bd
d01a22720918b781338b5bbf9202b241a5f99ee4
04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
quad9	Sinkholed

HTTP Headers

GET /MAIL903-01921/acesso/img/microsoft_logo.svg HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php

HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 21:54:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Wed, 28 Sep 2022 14:33:56 GMT
ETag: "e43-5e9bda68f6c2e"
Accept-Ranges: bytes
Content-Length: 3651
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml

capactmicroftmas.dns.army/MAIL903-01921/acesso/webserver.php

20.169.54.120

404 Not Found

287 B

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/webserver.php
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
287 B (287 bytes)
Hash
8b65aa0eee4a99130cc12993752200ef
0f83e5e59a5bb196c49d17b6e89bb470aa3ad7f0
62158782fca21c9ee727fb2f3c184e131e1e94c68aa6f7bb7dde1d51990d378d

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
quad9	Sinkholed

HTTP Headers

POST /MAIL903-01921/acesso/webserver.php HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 51
Origin: http://capactmicroftmas.dns.army
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php

HTTP/1.1 404 Not Found
Date: Tue, 18 Oct 2022 21:54:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 287
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

capactmicroftmas.dns.army/MAIL903-01921/acesso/img/hotmail.ico

20.169.54.120

404 Not Found

287 B

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/img/hotmail.ico
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
287 B (287 bytes)
Hash
8b65aa0eee4a99130cc12993752200ef
0f83e5e59a5bb196c49d17b6e89bb470aa3ad7f0
62158782fca21c9ee727fb2f3c184e131e1e94c68aa6f7bb7dde1d51990d378d

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
quad9	Sinkholed

HTTP Headers

GET /MAIL903-01921/acesso/img/hotmail.ico HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php

HTTP/1.1 404 Not Found
Date: Tue, 18 Oct 2022 21:54:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 287
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

capactmicroftmas.dns.army/MAIL903-01921/acesso/img/003.jpg

20.169.54.120

200 OK

428 kB

URL HTTP/1.1
capactmicroftmas.dns.army/MAIL903-01921/acesso/img/003.jpg
IP
20.169.54.120:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1366x700, components 3\012- data
Size
428 kB (428088 bytes)
Hash
c355b878e44917040c3bb2057e2ea1f7
44e1f30b3ce6e327f467225ff89ee47f836d7939
80c91304be4aae19bb772567e542db75010766d71e9ba4073e793fcfbbdd4aed

Detections

Analyzer	Verdict	Alert
urlquery		DynDNS domain detected
quad9	Sinkholed

HTTP Headers

GET /MAIL903-01921/acesso/img/003.jpg HTTP/1.1
Host: capactmicroftmas.dns.army
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/MAIL903-01921/acesso/loginsaltent.php

HTTP/1.1 200 OK
Date: Tue, 18 Oct 2022 21:54:09 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Wed, 28 Sep 2022 14:33:39 GMT
ETag: "68838-5e9bda58dac74"
Accept-Ranges: bytes
Content-Length: 428088
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10956
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 21:54:10 GMT
Connection: keep-alive

fonts.googleapis.com/css?family=Raleway

142.250.74.10

200 OK

998 B

URL HTTP/2
fonts.googleapis.com/css?family=Raleway
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
data
Size
998 B (998 bytes)
Hash
412184cbec940f6db960b69b77ac188d
818a193ca02488a83e01d83079a82a3ec998199d
6a8a39dc9f70a44c7867eadd102cfb9e37523cdfda019562c72f8e9a0114877e

HTTP Headers

GET /css?family=Raleway HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://capactmicroftmas.dns.army/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 18 Oct 2022 21:54:08 GMT
date: Tue, 18 Oct 2022 21:54:08 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10956
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 21:54:10 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10956
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 21:54:10 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
59c9f4b6a5cb5571f7e8ec52f3548732
9bd1c495d09547b8cc983f71b90471f42ec61f94
25c4798d1ef0730368cc5c6d41a4596c5c914865f6f7a4fad97bdd4ce017894e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25C4798D1EF0730368CC5C6D41A4596C5C914865F6F7A4FAD97BDD4CE017894E"
Last-Modified: Sun, 16 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10956
Expires: Wed, 19 Oct 2022 00:56:46 GMT
Date: Tue, 18 Oct 2022 21:54:10 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecd863b0-94dc-48ab-a768-cb25fea284e7.jpeg

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecd863b0-94dc-48ab-a768-cb25fea284e7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10168 bytes)
Hash
ae2bf42f05c120363dd9c8bc320cbdf9
3e9d928edb29f9d39feda401519dd82e2e509f1e
78985912f0d45719ebcf303e3056f422390ea79b2a5ab47b19cba87f4f11b8ba

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecd863b0-94dc-48ab-a768-cb25fea284e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10168
x-amzn-requestid: a52a1462-c23f-47a3-a71d-461f70f07dd4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aOFokG7MoAMFsgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634f1c9d-28faabe059a668aa610da199;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 21:37:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: G-mCNWS-oGtoERRbr1vNbgyaom-3twofIvHj1AcOatx4AHU30Q_92Q==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:42:49 GMT
etag: "3e9d928edb29f9d39feda401519dd82e2e509f1e"
content-type: image/jpeg
age: 681
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa93498e0-0d58-4395-9b74-9288b70d3169.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.1 kB (7139 bytes)
Hash
1afd9e3ed9813a01fc28ea84553b2675
76e1ca27983e04d48694ad21a126b0543d2e21cf
f46026e97bcafe56b19324c30ce283282f35ed448f19fef82197cd648b04b70f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa93498e0-0d58-4395-9b74-9288b70d3169.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7139
x-amzn-requestid: 7b6e9f7c-87cf-4f9b-9ee1-31374d4ecc01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aCQtHFWjoAMFmRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634a6186-7c0d1ffd0b4067d936c92d56;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 07:30:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Byd1eeYrleYGMFTjfC17cqhkR6Zzd0UVTLpZJFT9KVmcMjHAnIt7Rg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:43:01 GMT
age: 669
etag: "76e1ca27983e04d48694ad21a126b0543d2e21cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d6cfa7-6d1f-40ca-bf2d-507a8fffc5dd.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7749 bytes)
Hash
34233831dc5c15001753b8bcc03382b0
00790fcdc95ebb458a67c1de32fbb58039795d81
a63d7d3ff74534fa2edfef6aae76074b228fdd3966917903176d897e7ea1e1c5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87d6cfa7-6d1f-40ca-bf2d-507a8fffc5dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7749
x-amzn-requestid: 389e9ef8-8bf4-4aa4-9255-e71f64442dd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aBq4FFKioAMFoOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634a2500-307d1b4103e58eb400cdc6bc;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 03:12:00 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CSmVVhHYJ0HW3D61Xse0jsVoDBqKGx-scT6Vno55Ld8x3aK5gDU41w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 05:06:33 GMT
age: 60457
etag: "00790fcdc95ebb458a67c1de32fbb58039795d81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a93e847-d046-46de-bbdc-764ba175f07b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10835 bytes)
Hash
78b571387c948f6bdaa98e35bddec3f0
5142ae2e93decbc42bae5bfffd45e41c8283dc24
74b131b79c088a251e7006a8db2269befb6459b55592bf06e31947fe460e0464

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a93e847-d046-46de-bbdc-764ba175f07b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10835
x-amzn-requestid: 9ad78117-d4f5-4275-b92e-19083ce9a780
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aOFDpENQIAMFpGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634f1bb0-177e54e73ec483f87c1d248a;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 21:33:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: G21M4I0IvGk5RfJWltvsgJi0JN2JRQdypofdmhmUKzFgCJpznfyNbg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:42:49 GMT
age: 681
etag: "5142ae2e93decbc42bae5bfffd45e41c8283dc24"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

35 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc809406-f843-4494-9a76-eab77bec4daa.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
35 kB (35276 bytes)
Hash
b683fafb36238c7da6be76247f60600b
e975f7a307a970ab45b03f861fd7d875ec66028d
b65fa7f3e7e0d999ebdfc1a4beb74e21221e4ceabd9e57ed0af6ab4560e12fdd

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc809406-f843-4494-9a76-eab77bec4daa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 35276
x-amzn-requestid: 6e8a79ad-d0f3-4290-a1ed-ef9b1239f193
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aOFApGzbIAMFRGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634f1b9d-65cf1b926ab122b1716a2983;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 21:33:17 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hPbTIgByMSbi22qlqk74Vk8h6AWf5DxSWDZHjew5y-RHl6X0uRu_wQ==
via: 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:42:49 GMT
age: 681
etag: "e975f7a307a970ab45b03f861fd7d875ec66028d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca4f7fb1-6ff7-4200-a364-c7687de3e6cd.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10379 bytes)
Hash
b73891cfdb1a7b7316613e97d6f71c8d
af847fead79d25ce1f0fdc3bb7f043e834998090
035d0c6ae1c041f1ad77becefc57685de9b039a1e15c081009ba2b5f01ddfac8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca4f7fb1-6ff7-4200-a364-c7687de3e6cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10379
x-amzn-requestid: d76e8a53-63e3-492a-9480-62e767424032
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aBq4HGcToAMFkYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634a2500-5bf304b04114c31d15c008c4;Sampled=0
x-amzn-remapped-date: Sat, 15 Oct 2022 03:12:00 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SJB7Qbhv21noYVMkseuzk3Yy4UnzK07DujhkiKwFf6xUxNLVCRtrRA==
via: 1.1 e943d5f0cbb0d255d29da0ddf6639ba8.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Tue, 18 Oct 2022 21:42:49 GMT
age: 681
etag: "af847fead79d25ce1f0fdc3bb7f043e834998090"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (34)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN