Report - gaiaflashframework.tenderapp.com/

Report Overview

Submitted URL
gaiaflashframework.tenderapp.com/
IP
23.235.226.110
ASN
#19437 SS-ASH
Submitted
2022-11-26 08:11:45
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.77.32
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
gaiaflashframework.tenderapp.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.3 kB	13 kB	23.235.226.110
dygqdiu5wzisf.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.6 kB	252 kB	54.230.245.76
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	38 kB	142.250.74.174
ocsp.sectigo.com	487	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	340 B	964 B	104.18.32.68
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.161.230.192
maxcdn.bootstrapcdn.com	724	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	352 B	6.0 kB	104.18.11.207
secure.gravatar.com	1671	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	5.1 kB	192.0.73.2
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	49 kB	34.120.237.76
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
help.tenderapp.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	438 B	738 B	23.235.226.110

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-26	medium	dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend.js?1654918988	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend.js?1654918988	846 kB	2023-03-11	2023-03-12
Pretty URL dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend.js?1654918988 IP 54.230.245.76 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 11:46:36 Last Seen2023-03-12 16:01:30 Times Seen1 Hash 868a3dde388d3a2b959efdc134578e1b 482ec7b5101de47656f0fe03266e7a7da7e31caf aedb69236df13392f506e8dbeb8533f247ca71c80f537a4f4fad573230a0af19 Loading...

	gaiaflashframework.tenderapp.com/	327 B	2023-03-11	2023-03-11
Pretty URL gaiaflashframework.tenderapp.com/ IP 23.235.226.110 ASN #19437 SS-ASH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 20:34:04 Last Seen2023-03-11 20:34:04 Times Seen1 Hash 24d8c355f0b1ec551b8f66f158f137c1 defb4d69f8138f0ce9155e6acaabe7bff125da20 5d4b99c84cb6673b31d07a1484058cf03d78980d1f3ae7a2f779949b516192f8 Loading...

	gaiaflashframework.tenderapp.com/	1.2 kB	2023-03-11	2023-03-11
Pretty URL gaiaflashframework.tenderapp.com/ IP 23.235.226.110 ASN #19437 SS-ASH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 20:34:05 Last Seen2023-03-11 20:34:05 Times Seen1 Hash 5b12594c0e681a2ea275f88153806cf5 4cb75a0336e061a010f36cbdca6b80980895e39a f0ee90b68bc42deef83a9e91c650d2d79ef07adbb53a95f2d42b7e99f3b0010c Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-08	2024-04-26
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:22:31 Last Seen2024-04-26 05:50:27 Times Seen1534 Hash fda30e8a22c9bcd954fd8d0fadd0e77c ae47cd34cbde081a48d7f92fc80aaf06a1381193 b42e4a056cb5b80c5a315040826866445ec9332f0749e184509ab2d9d3b86719 Loading...

	www.google-analytics.com/ga.js	46 kB	2023-03-07	2024-04-16
Pretty URL www.google-analytics.com/ga.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:00 Last Seen2024-04-16 23:24:27 Times Seen3495 Hash e9372f0ebbcf71f851e3d321ef2a8e5a 2c7d19d1af7d97085c977d1b69dcb8b84483d87c 1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f Loading...

HTTP Transactions (39)

URL IP Response Size

gaiaflashframework.tenderapp.com/

23.235.226.110

200 OK

3.7 kB

URL HTTP/1.1
gaiaflashframework.tenderapp.com/
IP
23.235.226.110:0
ASN
#19437 SS-ASH

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Size
3.7 kB (3702 bytes)
Hash
54988c560e5c5fd94e29f167581f465b
5a0b31230abdc89dc37430d9328dac62f3617698
24a40755bdc48f71be0f270932dd9f1b09238246c779e62e0022ab5f730f834b

HTTP Headers

GET / HTTP/1.1
Host: gaiaflashframework.tenderapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 26 Nov 2022 08:11:34 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="ALL DSP COR CUR ADM DEV OUR IND UNI"
X-UA-Compatible: IE=Edge,chrome=1
ETag: W/"a091d6037bacc064f4799e8ec68aca4c"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: anon_token=b5a61866f; path=/; expires=Sun, 26-Nov-2023 08:11:34 GMT; HttpOnly; SameSite=Lax
_tender19_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJWI0Yjg4NTY4MmE2OGY4MzZmZWM1NjUzNTEyZWVmYTE1BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiRTMwNDZjOTI1ZmE0NjBmYzY1YmIyNmE2YzM0OTI3YWQ2OTY1Y2YxZmRlOTRhMzA3OGY4ZmI1MjkwMWMyNmUxNTAGOwBG--85ad98a1eb28f5e4da4047981ea4b3c20e3bbca9; path=/; HttpOnly; SameSite=Lax
X-Request-Id: 35db20d29276733f199a68445bcd1da0
X-Runtime: 0.028651
X-Rack-Cache: miss
Content-Security-Policy: default-src https: http: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' wss://*.tawk.to *.tawk.to nrpc.olark.com hooks.slack.com; img-src 'self' http: https: data:; report-uri https://help.tenderapp.com/csp_report
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: allowall
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15628
Expires: Sat, 26 Nov 2022 12:32:02 GMT
Date: Sat, 26 Nov 2022 08:11:34 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6928
Expires: Sat, 26 Nov 2022 10:07:02 GMT
Date: Sat, 26 Nov 2022 08:11:34 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5817
Cache-Control: max-age=100597
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 08:11:34 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 12:08:11 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: XrJLvLqc57NfxS2vDEe49bwZ4z0kSCUqEkXloxxJ9i2nIrlphQOA0w3okD+ajtwfsE21k7NOnHg=
x-amz-request-id: 83J00SP1ZAHCQX7V
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 07:41:07 GMT
age: 1827
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 07:19:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3141
alt-svc: clear
X-Firefox-Spdy: h2

dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend-datauri.css?1637988819

54.230.245.76

200 OK

19 kB

URL HTTP/1.1
dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend-datauri.css?1637988819
IP
54.230.245.76:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (65536), with no line terminators
Size
19 kB (18803 bytes)
Hash
d5cab8f4e3bdb8fca13470da7e741bff
4168cad810664e87f9cb47b387c0d3d729eb1055
026b3b76eecda67652037f4eed2365c71211d412686405c24679d9288671364a

HTTP Headers

GET /pkg/202206110340/frontend-datauri.css?1637988819 HTTP/1.1
Host: dygqdiu5wzisf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/

HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 18803
Connection: keep-alive
Server: nginx/1.20.1
Last-Modified: Sat, 27 Nov 2021 04:53:39 GMT
Content-Encoding: gzip
Date: Sat, 26 Nov 2022 08:11:11 GMT
ETag: "61a1b9d3-4973"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0tW6o6POdc1b04AySi15Mp96kf35-hMeC-vHbdBRDQbrOWwU3HAnkg==
Age: 8023

dygqdiu5wzisf.cloudfront.net/pkg/202206110340/safari.css?1637988819

54.230.245.76

200 OK

265 B

URL HTTP/1.1
dygqdiu5wzisf.cloudfront.net/pkg/202206110340/safari.css?1637988819
IP
54.230.245.76:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (449), with no line terminators
Size
265 B (265 bytes)
Hash
98cd10947b71acff92aa515eb4192312
a3b8683f05e9c8605261828d23d2f6e9368171d0
e9a92ecc4a7813be11a1d08164945490b3f52623cd2c87beec891ef8fe3fd240

HTTP Headers

GET /pkg/202206110340/safari.css?1637988819 HTTP/1.1
Host: dygqdiu5wzisf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/

HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 265
Connection: keep-alive
Server: nginx/1.20.1
Last-Modified: Sat, 27 Nov 2021 04:53:39 GMT
Content-Encoding: gzip
Date: Sat, 26 Nov 2022 08:11:11 GMT
ETag: "61a1b9d3-109"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7HDmSHSJnDgVlOYwXQGNPs50hFyxui-TNkTGNKx5BNAeZrxWnDB16g==
Age: 1534

dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend.css?1637988819

54.230.245.76

200 OK

18 kB

URL HTTP/1.1
dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend.css?1637988819
IP
54.230.245.76:0
ASN
#16509 AMAZON-02

File type
ASCII text, with very long lines (65536), with no line terminators
Size
18 kB (18137 bytes)
Hash
3bd30e8b9adf690e58f46d53eff96e34
f7fa1bccafaaefcd1065794e34998ad67efc5f31
d1dc14ba90225ffda192fb6c737749e1df7c0b3ae6face0a3e0074b3494a6fa8

HTTP Headers

GET /pkg/202206110340/frontend.css?1637988819 HTTP/1.1
Host: dygqdiu5wzisf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/

HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 18137
Connection: keep-alive
Server: nginx/1.20.1
Last-Modified: Sat, 27 Nov 2021 04:53:39 GMT
Content-Encoding: gzip
Date: Fri, 25 Nov 2022 19:27:53 GMT
ETag: "61a1b9d3-46d9"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: uWQftf6EdUmY0lmstoNu7SbOZRH_d9PTHgVnHkSCBbitNf5qbpzsQA==
Age: 45821

dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend.js?1654918988

54.230.245.76

200 OK

211 kB

URL HTTP/1.1
dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend.js?1654918988
IP
54.230.245.76:0
ASN
#16509 AMAZON-02

File type
Unicode text, UTF-8 text, with very long lines (2374)
Size
211 kB (210828 bytes)
Hash
f37700e204088832b76713bec20bba24
4ab74c463a798b84d7031b264d2ca855799215b6
b50d67aa79f7925fad3b77c1cd7c039ef6fb3aa51b4eee009f2c979714fe57ab

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /pkg/202206110340/frontend.js?1654918988 HTTP/1.1
Host: dygqdiu5wzisf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 210828
Connection: keep-alive
Server: nginx/1.20.1
Last-Modified: Sat, 11 Jun 2022 03:43:08 GMT
Content-Encoding: gzip
Date: Sat, 26 Nov 2022 08:11:11 GMT
ETag: "62a40f4c-3378c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: I_I7dCxE11Bxkqgb6l56m73mw1Gm19_KLtBo3x0ZFGceRg0DU4UQfA==
Age: 23

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 08:11:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/font-awesome/4.1.0/css/font-awesome.min.css

104.18.11.207

200 OK

5.2 kB

URL HTTP/1.1
maxcdn.bootstrapcdn.com/font-awesome/4.1.0/css/font-awesome.min.css
IP
104.18.11.207:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (20604)
Size
5.2 kB (5190 bytes)
Hash
bf26d67cb68e5dcd06ebaf54a95e1572
8bcb557503c9088f4b21e473a0037ec3ff7ebd29
dff3eff53592a54969bbeda445d324bf4f452ba8a4e0110a8c0075b4be1786f3

HTTP Headers

GET /font-awesome/4.1.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/

HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 08:11:34 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CDN-PullZone: 252412
CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
CDN-RequestCountryCode: DE
CDN-EdgeStorageId: 723, 617
Last-Modified: Mon, 25 Jan 2021 22:04:53 GMT
CDN-CachedAt: 2021-07-24 09:40:41
CDN-RequestPullSuccess: True
CDN-RequestPullCode: 200
Cache-Control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
CDN-RequestId: 2b50aaedc481ac5a56e54a88a5b8c43a
Content-Encoding: gzip
CDN-Status: 200
CDN-Cache: HIT
CF-Cache-Status: HIT
Age: 12493993
Server: cloudflare
CF-RAY: 7701277798d2b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

gaiaflashframework.tenderapp.com/help/theme.css?1637988819

23.235.226.110

200 OK

3.9 kB

URL HTTP/1.1
gaiaflashframework.tenderapp.com/help/theme.css?1637988819
IP
23.235.226.110:0
ASN
#19437 SS-ASH

File type
ASCII text, with very long lines (15744), with no line terminators
Size
3.9 kB (3870 bytes)
Hash
220f40b90b9e6b614e8e87bf5b1597a8
ee98e8c966665ad48d249213435a932f13244750
836f3075842c2b340b5beafbe3f6fe46763d11a9466cfee8a990225b67abf304

HTTP Headers

GET /help/theme.css?1637988819 HTTP/1.1
Host: gaiaflashframework.tenderapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/
Cookie: anon_token=b5a61866f; _tender19_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJWI0Yjg4NTY4MmE2OGY4MzZmZWM1NjUzNTEyZWVmYTE1BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiRTMwNDZjOTI1ZmE0NjBmYzY1YmIyNmE2YzM0OTI3YWQ2OTY1Y2YxZmRlOTRhMzA3OGY4ZmI1MjkwMWMyNmUxNTAGOwBG--85ad98a1eb28f5e4da4047981ea4b3c20e3bbca9

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 26 Nov 2022 08:11:35 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-UA-Compatible: IE=Edge,chrome=1
ETag: W/"60a3eefaf64e089ee80ff98a53391af5"
Cache-Control: must-revalidate, private, max-age=0
X-Request-Id: 913755a73c55235e347607b80ab4bca6
X-Runtime: 0.005736
X-Rack-Cache: miss
Content-Security-Policy: default-src https: http: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' wss://*.tawk.to *.tawk.to nrpc.olark.com hooks.slack.com; img-src 'self' http: https: data:; report-uri https://help.tenderapp.com/csp_report
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: allowall
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip

dygqdiu5wzisf.cloudfront.net/help/images/btn-shader.png?1637988819

54.230.245.76

200 OK

142 B

URL HTTP/1.1
dygqdiu5wzisf.cloudfront.net/help/images/btn-shader.png?1637988819
IP
54.230.245.76:0
ASN
#16509 AMAZON-02

File type
PNG image data, 1 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size
142 B (142 bytes)
Hash
765d6b2107b11dc68b07cda56857138f
346232379ae25e517cbc3047fe4dccbd0fb74869
e52779897b8912726738f7629b14feac4aa4367fbef607a8399ad15770db0b7b

HTTP Headers

GET /help/images/btn-shader.png?1637988819 HTTP/1.1
Host: dygqdiu5wzisf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend.css?1637988819

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 142
Connection: keep-alive
Server: nginx/1.20.1
Last-Modified: Sat, 27 Nov 2021 06:09:05 GMT
Accept-Ranges: bytes
Date: Sat, 26 Nov 2022 08:11:11 GMT
ETag: "61a1cb81-8e"
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SPRQKP-AqPJ9K1PS_Y43rmCE7MDpUHAOiWplUYVU5nr0T8jq-cVkXg==
Age: 11256

dygqdiu5wzisf.cloudfront.net/help/images/icon_generic.gif?1637988819

54.230.245.76

200 OK

73 B

URL HTTP/1.1
dygqdiu5wzisf.cloudfront.net/help/images/icon_generic.gif?1637988819
IP
54.230.245.76:0
ASN
#16509 AMAZON-02

File type
GIF image data, version 89a, 16 x 16\012- data
Size
73 B (73 bytes)
Hash
c3536f5f2e84445eff501aaf84e5a627
7697655bb84fcfdab1384ce05cfe0e87b9b781ac
057af3d294203e2d45f866e7f5fdf0324f820c36ce12ff83a30840c5516d9190

HTTP Headers

GET /help/images/icon_generic.gif?1637988819 HTTP/1.1
Host: dygqdiu5wzisf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend.css?1637988819

HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 73
Connection: keep-alive
Server: nginx/1.20.1
Last-Modified: Sat, 27 Nov 2021 06:09:05 GMT
Accept-Ranges: bytes
Date: Sat, 26 Nov 2022 08:11:11 GMT
ETag: "61a1cb81-49"
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ggqLAlHW_5ptmK2zqKjitjJhYRO1HXKM7HxJ4vor23xqVcC2MDsoyA==
Age: 30129

dygqdiu5wzisf.cloudfront.net/help/images/icon_folder.gif?1637988819

54.230.245.76

200 OK

71 B

URL HTTP/1.1
dygqdiu5wzisf.cloudfront.net/help/images/icon_folder.gif?1637988819
IP
54.230.245.76:0
ASN
#16509 AMAZON-02

File type
GIF image data, version 89a, 16 x 16\012- data
Size
71 B (71 bytes)
Hash
326047f0b409ef48947487e5c88bc355
3f5272258f0c5229f2570ee09d7c5e50f21909bd
cc9f64bc8a3f4481922d503a1f3fd233900bacdffdb2cf8a8ce348bfdd875c8f

HTTP Headers

GET /help/images/icon_folder.gif?1637988819 HTTP/1.1
Host: dygqdiu5wzisf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dygqdiu5wzisf.cloudfront.net/pkg/202206110340/frontend.css?1637988819

HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 71
Connection: keep-alive
Server: nginx/1.20.1
Date: Fri, 25 Nov 2022 17:17:01 GMT
Last-Modified: Sat, 27 Nov 2021 06:09:05 GMT
ETag: "61a1cb81-47"
Accept-Ranges: bytes
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1kE5oUQgBPqIBX9hYtlInC5_6s7GKlYbLlyxW1U_6eVa9eNFhYyh7A==
Age: 53674

www.google-analytics.com/analytics.js

142.250.74.174

200 OK

20 kB

URL HTTP/1.1
www.google-analytics.com/analytics.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (20039 bytes)
Hash
47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/

HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Sat, 26 Nov 2022 06:22:56 GMT
Expires: Sat, 26 Nov 2022 08:22:56 GMT
Cache-Control: public, max-age=7200
Age: 6519
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript

www.google-analytics.com/ga.js

142.250.74.174

200 OK

17 kB

URL HTTP/1.1
www.google-analytics.com/ga.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1305)
Size
17 kB (17168 bytes)
Hash
01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d

HTTP Headers

GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/

HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Sat, 26 Nov 2022 07:05:59 GMT
Expires: Sat, 26 Nov 2022 09:05:59 GMT
Cache-Control: public, max-age=7200
Age: 3936
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript

secure.gravatar.com/avatar/197db09f30ae36cc201006eb1deeb4b5?s=25&d=identicon

192.0.73.2

200 OK

1.0 kB

URL HTTP/2
secure.gravatar.com/avatar/197db09f30ae36cc201006eb1deeb4b5?s=25&d=identicon
IP
192.0.73.2:0
ASN
#2635 AUTOMATTIC

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 25x25, components 3\012- data
Size
1.0 kB (1049 bytes)
Hash
944d4c333e180110dc0d442f7827ff17
0c3471862b14f448ff6f16f65fff7c64d070a42f
e0446ca0465f9d4551ec02bb0fa57bae86ce9baf14da0ec32ab0ee0985cb043c

HTTP Headers

GET /avatar/197db09f30ae36cc201006eb1deeb4b5?s=25&d=identicon HTTP/1.1
Host: secure.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 08:11:35 GMT
content-type: image/jpeg
content-length: 1049
last-modified: Tue, 01 Sep 2020 13:16:50 GMT
link: <https://www.gravatar.com/avatar/197db09f30ae36cc201006eb1deeb4b5?s=25&d=identicon>; rel="canonical"
content-disposition: inline; filename="197db09f30ae36cc201006eb1deeb4b5.jpeg"
access-control-allow-origin: *
expires: Sat, 26 Nov 2022 08:16:35 GMT
cache-control: max-age=300
x-nc: HIT arn 4
accept-ranges: bytes
X-Firefox-Spdy: h2

secure.gravatar.com/avatar/a7599711ddd2f35c9d3bcfb3847a1bf3?s=25&d=identicon

192.0.73.2

200 OK

1.2 kB

URL HTTP/2
secure.gravatar.com/avatar/a7599711ddd2f35c9d3bcfb3847a1bf3?s=25&d=identicon
IP
192.0.73.2:0
ASN
#2635 AUTOMATTIC

File type
PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Size
1.2 kB (1173 bytes)
Hash
aa2dc8391794052f34174ceb8c166578
5a2ae0d75f286d27601a9a0af5eee077656dd71a
b4186507622cd6f4905d97117bda390e29a4895ce8ecbe9e09d2fedec702d5a6

HTTP Headers

GET /avatar/a7599711ddd2f35c9d3bcfb3847a1bf3?s=25&d=identicon HTTP/1.1
Host: secure.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 08:11:35 GMT
content-type: image/png
content-length: 1173
last-modified: Wed, 11 Jan 1984 08:00:00 GMT
link: <https://www.gravatar.com/avatar/a7599711ddd2f35c9d3bcfb3847a1bf3?s=25&d=identicon>; rel="canonical"
access-control-allow-origin: *
expires: Sat, 26 Nov 2022 08:16:35 GMT
cache-control: max-age=300
x-nc: HIT arn 4
accept-ranges: bytes
X-Firefox-Spdy: h2

secure.gravatar.com/avatar/3695b42c592832b3b026445dc3ea96a8?s=25&d=identicon

192.0.73.2

200 OK

1.5 kB

URL HTTP/2
secure.gravatar.com/avatar/3695b42c592832b3b026445dc3ea96a8?s=25&d=identicon
IP
192.0.73.2:0
ASN
#2635 AUTOMATTIC

File type
PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Size
1.5 kB (1509 bytes)
Hash
fa8110e98411f0e4ca46484658d1bee7
236681f0f264a26d141a3f9fb55b8abe3efa586b
63560724579b4d227236b35c984e10a0a0315733a15ebac7a138bf7ddc4afb8f

HTTP Headers

GET /avatar/3695b42c592832b3b026445dc3ea96a8?s=25&d=identicon HTTP/1.1
Host: secure.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 08:11:35 GMT
content-type: image/png
content-length: 1509
last-modified: Wed, 11 Jan 1984 08:00:00 GMT
link: <https://www.gravatar.com/avatar/3695b42c592832b3b026445dc3ea96a8?s=25&d=identicon>; rel="canonical"
access-control-allow-origin: *
expires: Sat, 26 Nov 2022 08:16:35 GMT
cache-control: max-age=300
x-nc: HIT arn 4
accept-ranges: bytes
X-Firefox-Spdy: h2

gaiaflashframework.tenderapp.com/help/images/apple-touch-icon.png

23.235.226.110

200 OK

3.0 kB

URL HTTP/1.1
gaiaflashframework.tenderapp.com/help/images/apple-touch-icon.png
IP
23.235.226.110:0
ASN
#19437 SS-ASH

File type
PNG image data, 158 x 158, 8-bit/color RGB, non-interlaced\012- data
Size
3.0 kB (2968 bytes)
Hash
49673d69c854520d38c3c1dc5bd3c326
212af315017ec8ccb061fa3bcce8787b8ef3d84d
bf7f1a42cba3a4dd939abcf6fc86d337738f4a526b5a3617e6ee197ce1e608e4

HTTP Headers

GET /help/images/apple-touch-icon.png HTTP/1.1
Host: gaiaflashframework.tenderapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/
Cookie: anon_token=b5a61866f; _tender19_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJWI0Yjg4NTY4MmE2OGY4MzZmZWM1NjUzNTEyZWVmYTE1BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiRTMwNDZjOTI1ZmE0NjBmYzY1YmIyNmE2YzM0OTI3YWQ2OTY1Y2YxZmRlOTRhMzA3OGY4ZmI1MjkwMWMyNmUxNTAGOwBG--85ad98a1eb28f5e4da4047981ea4b3c20e3bbca9; tzoffset=0

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 26 Nov 2022 08:11:35 GMT
Content-Type: image/png
Content-Length: 2968
Last-Modified: Sat, 27 Nov 2021 06:09:05 GMT
Connection: keep-alive
ETag: "61a1cb81-b98"
Accept-Ranges: bytes

gaiaflashframework.tenderapp.com/favicon.ico

23.235.226.110

200 OK

0 B

URL HTTP/1.1
gaiaflashframework.tenderapp.com/favicon.ico
IP
23.235.226.110:0
ASN
#19437 SS-ASH

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: gaiaflashframework.tenderapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/
Cookie: anon_token=b5a61866f; _tender19_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJWI0Yjg4NTY4MmE2OGY4MzZmZWM1NjUzNTEyZWVmYTE1BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiRTMwNDZjOTI1ZmE0NjBmYzY1YmIyNmE2YzM0OTI3YWQ2OTY1Y2YxZmRlOTRhMzA3OGY4ZmI1MjkwMWMyNmUxNTAGOwBG--85ad98a1eb28f5e4da4047981ea4b3c20e3bbca9; tzoffset=0

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 26 Nov 2022 08:11:35 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Sat, 27 Nov 2021 06:09:05 GMT
Connection: keep-alive
ETag: "61a1cb81-0"
Accept-Ranges: bytes

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 08:08:54 GMT
cache-control: public,max-age=3600
age: 161
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1281409669&utmhn=gaiaflashframework.tenderapp.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1140x816&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Welcome%20-%20Gaia%20Flash%20Framework%20Support&utmhid=1499471896&utmr=-&utmp=%2F&utmht=1669450294544&utmac=UA-2041224-2&utmcc=__utma%3D1.879624559.1669450295.1669450295.1669450295.1%3B%2B__utmz%3D1.1669450295.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1872251119&utmredir=1&utmu=qhAgAAAAAAAAAAAAAAABAAAE~

142.250.74.174

200 OK

35 B

URL HTTP/1.1
www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1281409669&utmhn=gaiaflashframework.tenderapp.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1140x816&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Welcome%20-%20Gaia%20Flash%20Framework%20Support&utmhid=1499471896&utmr=-&utmp=%2F&utmht=1669450294544&utmac=UA-2041224-2&utmcc=__utma%3D1.879624559.1669450295.1669450295.1669450295.1%3B%2B__utmz%3D1.1669450295.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1872251119&utmredir=1&utmu=qhAgAAAAAAAAAAAAAAABAAAE~
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
GIF image data, version 89a, 1 x 1\012- data
Size
35 B (35 bytes)
Hash
28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015

HTTP Headers

GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1281409669&utmhn=gaiaflashframework.tenderapp.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1140x816&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Welcome%20-%20Gaia%20Flash%20Framework%20Support&utmhid=1499471896&utmr=-&utmp=%2F&utmht=1669450294544&utmac=UA-2041224-2&utmcc=__utma%3D1.879624559.1669450295.1669450295.1669450295.1%3B%2B__utmz%3D1.1669450295.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1872251119&utmredir=1&utmu=qhAgAAAAAAAAAAAAAAABAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gaiaflashframework.tenderapp.com/

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Sat, 26 Nov 2022 08:11:35 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1059
Cache-Control: max-age=90775
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 08:11:35 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 09:24:30 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

ocsp.sectigo.com/

104.18.32.68

200 OK

472 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
7c781cfe9a87185708818acd02299519
e6114d99cbadb5ec11d0ea3dc4b1b5d17bd24189
aa953af498aeaff73cd5abb9625f9c24423a40c7cbfcd542179aedbd5c79d471

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 08:11:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 01:00:35 GMT
Expires: Fri, 02 Dec 2022 01:00:34 GMT
Etag: "e6114d99cbadb5ec11d0ea3dc4b1b5d17bd24189"
Cache-Control: max-age=491938,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7701277b9b3f0b65-OSL

help.tenderapp.com/csp_report

23.235.226.110

204 No Content

0 B

URL HTTP/1.1
help.tenderapp.com/csp_report
IP
23.235.226.110:0
ASN
#19437 SS-ASH

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /csp_report HTTP/1.1
Host: help.tenderapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 891
Origin: http://gaiaflashframework.tenderapp.com
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Sat, 26 Nov 2022 08:11:35 GMT
Connection: keep-alive
X-UA-Compatible: IE=Edge,chrome=1
Cache-Control: no-cache
X-Request-Id: c470ef688479d1f1ba43fa7cc570c124
X-Runtime: 0.000707
X-Rack-Cache: invalidate, pass
Content-Security-Policy: default-src https: http: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' wss://*.tawk.to *.tawk.to nrpc.olark.com hooks.slack.com; img-src 'self' http: https: data:; report-uri https://help.tenderapp.com/csp_report
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: allowall
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block

push.services.mozilla.com/

35.161.230.192

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.161.230.192:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: zjhLGBT5bFv/w4ex7OUhsQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UbHaiQJ3+6Xga6RnqLPRys/nrbU=

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13770
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 08:11:37 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13770
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 08:11:37 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13770
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 08:11:37 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13770
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 08:11:37 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg

34.120.237.76

200 OK

9.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.9 kB (9914 bytes)
Hash
3b1c6878914466cfece680fa7cb73502
47fac81a2dd809df5c42ca1362f71d553572d2b1
6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7cJmhEGkKqLUQUMqGuYtWBeu_1nlEUAxgTMy4ABekPJYrJP95wE6Jg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:05 GMT
age: 36752
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30fddcf4-c88b-41c3-90f7-a4530639de73.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.0 kB (7025 bytes)
Hash
7e0c5064718601e80b7bfc931120ff70
741e5e48c4fb170efee9b611be5638d999a09bd2
d0b1537f43277e7f59152e6272d4f3888ab4618fa7fe0e4b24e2f851dbf0f4cd

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30fddcf4-c88b-41c3-90f7-a4530639de73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7025
x-amzn-requestid: 2c9cd3bc-80d4-4578-a0aa-4f1ff7f19d30
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVNYGwaIAMFU8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813588-0c66a293144f894f001ae0cf;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gxs4AeIklafRh02vSn6hA5r7MZagrQsqNR0zhpl5HHiQhQEswFc8RQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:35 GMT
age: 37382
etag: "741e5e48c4fb170efee9b611be5638d999a09bd2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

3.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.5 kB (3502 bytes)
Hash
a783df85f30f9c555f9df6b99f61744d
61f9bed607e81606be78285596acdc5e0e4f4994
19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QS3ZKYetcm87GNwSr34eRPF2d4r8ppwf3fT19aV-u84f7ObX4bU8wQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 08:20:28 GMT
age: 85869
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8913 bytes)
Hash
5088223f5973e3cd56f03f50a1e84b79
0b6c9b51d10762a4747286ab5b1c2354fa39c622
8159e4f7eec7bea518bb29e3fdb070bab4fb70116205577f7b7d74ad4d0dfbc7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8913
x-amzn-requestid: d0a9414c-eccf-44e8-adb7-92654544eeb5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWXEpeIAMFnzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-5825510666b3e80a5f83cafa;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LDrq5UcFhG63XFZhmeS5Z_mEkwrvuQ2bLfT8hV9I3E1s1lJLZF5Dww==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:24 GMT
age: 37513
etag: "0b6c9b51d10762a4747286ab5b1c2354fa39c622"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.3 kB (4309 bytes)
Hash
841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezHvyK3va4SioabOjSittTiLQRs_Q8k4TPxkiGp_svtZ8omDPTUN-A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 05:04:28 GMT
age: 11229
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.0 kB (9049 bytes)
Hash
c8dc4b8a7e9f7f4f84f0da568b43392b
3d32bff85cb7ec118c4496d0c3802829fdc9af3b
4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJZkZ18TlSgdBWsmSroQPIcYIvBFvz5-7hu9_GravTcz6zqxKXHZrg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:43:36 GMT
age: 37681
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (39)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size