Report - rachelfaithcox.com/HUD/off-vl

Report Overview

Submitted URL
rachelfaithcox.com/HUD/off-vl
IP
107.154.159.11
ASN
#19551 INCAPSULA
Submitted
2022-12-08 01:34:14
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	44.237.163.41
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	2.8 kB	142.250.74.131
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	952 B	48 kB	142.250.74.35
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.9 kB	34.160.144.191
rachelfaithcox.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	9.3 kB	217 kB	107.154.173.11
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	341 B	797 B	93.184.220.29
store-images.s-microsoft.com	5954	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	512 B	4.8 kB	2.18.173.121
pngimg.com	53014	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	716 B	34 kB	104.26.5.108
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	49 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-12-07	medium	rachelfaithcox.com/HUD/off-vl	Box

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-08	medium	rachelfaithcox.com/HUD/off-vl	Phishing
2022-12-08	medium	rachelfaithcox.com/HUD/off-vl/	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	rachelfaithcox.com/HUD/off-vl/	61 B	2023-03-08	2023-03-13
Pretty URL rachelfaithcox.com/HUD/off-vl/ IP 107.154.173.11 ASN #19551 INCAPSULA Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:20:32 Last Seen2023-03-13 20:58:28 Times Seen1 Hash 9f7124c662cb66d79f0dc87548d43bb5 d0876cb83f7589aa99e9c63838ad0da9b1198b22 2dd6c182a97b5e43bcfc23747c0e590b34f28d71361c61807608cad6dac2f9c5 Loading...

HTTP Transactions (44)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
aea93551fa9deb76ae49a3b4019d64fe
e3b8862057ebe839959228e42246d7b1807fc90c
7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3462
Expires: Thu, 08 Dec 2022 02:31:45 GMT
Date: Thu, 08 Dec 2022 01:34:03 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6245
Expires: Thu, 08 Dec 2022 03:18:08 GMT
Date: Thu, 08 Dec 2022 01:34:03 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
00e7703bd74975689fc9050356aaca6b
9788fe6a36d6f278e8da329ebc5dd87bcd212317
593bc437ff8a8233516c62613d50220fcb25b9f967ed5fb384c253f0db135103

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7496
Expires: Thu, 08 Dec 2022 03:38:59 GMT
Date: Thu, 08 Dec 2022 01:34:03 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 01:08:07 GMT
content-type: application/json
age: 1556
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: DiCBDUAL0h+3rlrnFnUHfPv/rouibxmM7nIZPD3ntmd+mZnH2On6hm88+JHg6SqjKTgaXpk67F609SPOMkpnWw==
x-amz-request-id: 728PXC2F19JG36AS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 00:47:43 GMT
age: 2780
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

rachelfaithcox.com/HUD/off-vl

107.154.173.11

301 Moved Permanently

245 B

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
245 B (245 bytes)
Hash
f6882a694d17d5b21fe1536e3cbb9cc3
cfe7ecd796c12785f69122dbf960dbc48bc02ef7
ed39091fa5ae92894876703753cbabe9277d7a8eb82fb4a22da573ed9360605a

Detections

Analyzer	Verdict	Alert
openphish	Box
fortinet	Phishing

HTTP Headers

GET /HUD/off-vl HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Thu, 08 Dec 2022 01:34:03 GMT
Server: Apache
Location: http://rachelfaithcox.com/HUD/off-vl/
Content-Length: 245
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
Set-Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; expires=Thu, 07 Dec 2023 06:18:28 GMT; HttpOnly; path=/; Domain=.rachelfaithcox.com
incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; path=/; Domain=.rachelfaithcox.com
X-CDN: Imperva
X-Iinfo: 13-479360082-479360083 NNNN CT(63 -1 0) RT(1670463242452 0) q(0 0 1 0) r(1 1) U11

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 01:34:03 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

rachelfaithcox.com/HUD/off-vl/

107.154.173.11

200 OK

110 B

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
HTML document text\012- HTML document, ASCII text, with no line terminators
Size
110 B (110 bytes)
Hash
b1b659c5f3759fefb26074a6d448badf
89e922c6735b25835656a84093482ae123243556
4faf3c587c6428d92b452bc6556f07b19fd547e4c186d464de4461d1b72403ff

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /HUD/off-vl/ HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 01:34:03 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=caf15528b5efd76d723ae71ac290174e; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 110
Keep-Alive: timeout=5, max=74
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
X-CDN: Imperva
X-Iinfo: 13-479360082-479360083 SNNN RT(1670463242452 327) q(0 0 0 -1) r(2 2) U2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 01:07:55 GMT
age: 1568
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true

107.154.173.11

200 OK

2.1 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (686), with CRLF line terminators
Size
2.1 kB (2121 bytes)
Hash
20879e5b203004ec31555b1a5456c275
234ff49cf02c8e1d6eb0a5ba95ec898a931efb54
6b7fcd0755ad1fafa98bd7a5d412b4128d3b6def3ce277877e150cefb005d825

HTTP Headers

GET /HUD/off-vl/Login.php?sslchannel=true HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 01:34:03 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2121
Keep-Alive: timeout=5, max=73
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
X-CDN: Imperva
X-Iinfo: 13-479360082-479360083 SNNN RT(1670463242452 699) q(0 0 0 -1) r(1 1) U2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
053aff7451e55d4269dd9610ab070f3f
b3376256d11d159b0c7280ba1515b78d7d9e12ca
24114ca560fe70d03185bd66985603fd5a03dc310aa9a8ea7a7b3723ed46ce3e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1305
Cache-Control: max-age=114871
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 01:34:04 GMT
Etag: "639057aa-1d7"
Expires: Fri, 09 Dec 2022 09:28:35 GMT
Last-Modified: Wed, 07 Dec 2022 09:06:50 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

rachelfaithcox.com/HUD/off-vl/assets/css/css_whE_FIKmCdJjmQukMY5DBbmkss9qZjXENYcyIcR-90c.css

107.154.173.11

200 OK

12 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/css/css_whE_FIKmCdJjmQukMY5DBbmkss9qZjXENYcyIcR-90c.css
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
ASCII text, with very long lines (18551)
Size
12 kB (12465 bytes)
Hash
6dc334c142621e777795e9e177eaf7ea
a3aff081e69841789f08cd61de3c054c02e5a577
2d9f7814ccbddafb876d89a6314a5aca25cd203e7fed69b93f680369f166353d

HTTP Headers

GET /HUD/off-vl/assets/css/css_whE_FIKmCdJjmQukMY5DBbmkss9qZjXENYcyIcR-90c.css HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "6bb53a5e"
Last-Modified: Thu, 01 Aug 2019 17:44:44 GMT
Content-Type: text/css
Content-Length: 12465
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 01:34:03 GMT
X-CDN: Imperva
X-Iinfo: 13-479360082-478517736 2CNN RT(1670463242452 1009) q(0 0 0 -1) r(0 0) U18

rachelfaithcox.com/HUD/off-vl/assets/css/css_yXMMnLSSpPunfPzrxqTY5Fxi0thyZrjewLEjqduzimc.css

107.154.173.11

200 OK

2.3 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/css/css_yXMMnLSSpPunfPzrxqTY5Fxi0thyZrjewLEjqduzimc.css
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
troff or preprocessor input text\012- assembler source, ASCII text, with very long lines (1547)
Size
2.3 kB (2331 bytes)
Hash
866c72616341fd0d30b276958757fbd4
cd6b9e383bbe09cfb205fb8f6bd9e83e1f66ace9
4d0d228b46574fcc4692090aca56b69d17c8e72fa3fb3d4dc5e9bb3b5427af57

HTTP Headers

GET /HUD/off-vl/assets/css/css_yXMMnLSSpPunfPzrxqTY5Fxi0thyZrjewLEjqduzimc.css HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "29321542"
Last-Modified: Thu, 01 Aug 2019 17:44:44 GMT
Content-Type: text/css
Content-Length: 2331
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 01:34:03 GMT
X-CDN: Imperva
X-Iinfo: 14-561627723-561186641 2CNN RT(1670463242552 909) q(0 0 0 -1) r(0 0) U18

rachelfaithcox.com/HUD/off-vl/assets/css/css.css

107.154.173.11

200 OK

759 B

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/css/css.css
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
ASCII text
Size
759 B (759 bytes)
Hash
293213591df2673b34d39d210282063f
616b0c5140fc242ad69bc4e826a259a0cdc95fdf
863c20c5a6edc2c6f7bfc86ee13c03ba2e31af688026c9643a6bf09a38f36b4d

HTTP Headers

GET /HUD/off-vl/assets/css/css.css HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "1213632c"
Last-Modified: Thu, 01 Aug 2019 17:44:44 GMT
Content-Type: text/css
Content-Length: 759
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 01:34:03 GMT
X-CDN: Imperva
X-Iinfo: 12-379742696-379656976 2CNN RT(1670463243590 0) q(0 0 0 -1) r(0 0) U18

push.services.mozilla.com/

44.237.163.41

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.237.163.41:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rtzhn+HOcIF9fzefTZiB5w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bM/uf2z3X9CpKwrqMBePp97/AKQ=

rachelfaithcox.com/HUD/off-vl/assets/css/css_7jDhC7Vm4-oxtUbtZMHwD8LA2Gp2KNpvOzvod9283FA.css

107.154.173.11

200 OK

50 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/css/css_7jDhC7Vm4-oxtUbtZMHwD8LA2Gp2KNpvOzvod9283FA.css
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
ASCII text, with very long lines (58048)
Size
50 kB (49563 bytes)
Hash
39462d12a4b69a6205dc34fa1de9ba1f
a748361c8efd8a4b42c276bef922ad95eef36ab5
9f19222e086d5400b8481f214cd1ad88d916f764ed57333b2167940329584d71

HTTP Headers

GET /HUD/off-vl/assets/css/css_7jDhC7Vm4-oxtUbtZMHwD8LA2Gp2KNpvOzvod9283FA.css HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "66a476d3"
Last-Modified: Thu, 01 Aug 2019 17:44:44 GMT
Content-Type: text/css
Content-Length: 49563
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 01:34:03 GMT
X-CDN: Imperva
X-Iinfo: 14-561627723-561485031 2CNN RT(1670463242552 1067) q(0 0 0 -1) r(0 0) U18

store-images.s-microsoft.com/image/apps.25144.13510798887489353.ba91417f-f0d9-447e-8437-1c100c23ade6.096b3123-c50e-4942-be9b-cb16e629d4de?w=180&h=180&q=60

2.18.173.121

200 OK

4.4 kB

URL HTTP/1.1
store-images.s-microsoft.com/image/apps.25144.13510798887489353.ba91417f-f0d9-447e-8437-1c100c23ade6.096b3123-c50e-4942-be9b-cb16e629d4de?w=180&h=180&q=60
IP
2.18.173.121:0
ASN
#16625 AKAMAI-AS

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
4.4 kB (4423 bytes)
Hash
8cd7fb32de1d33bf55571c3159264903
78f188834913ee317e1f0f3b0d87c96e2e590a27
a80f6e04a6c9f0bd6349e8ffe05eeacae606ec98ccbecfa70c6312b5fa96f836

HTTP Headers

GET /image/apps.25144.13510798887489353.ba91417f-f0d9-447e-8437-1c100c23ade6.096b3123-c50e-4942-be9b-cb16e629d4de?w=180&h=180&q=60 HTTP/1.1
Host: store-images.s-microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://rachelfaithcox.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: public, max-age=7776000, s-maxage=7776000
Content-Type: image/png
Last-Modified: Fri, 08 Jul 2016 22:31:23 GMT
Accept-Ranges: none
ETag: W/"AEC5+BN3YGNj5oS4nDhpXCfKHbggltQgMHg4RDNBNzdGOTdEMzFFMDE"
MS-CV: vT5RbllY6EGA57pJ.0
Access-Control-Expose-Headers: MS-CV
Content-Length: 4423
Date: Thu, 08 Dec 2022 01:34:04 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *

pngimg.com/uploads/email/email_PNG20.png

104.26.5.108

301 Moved Permanently

0 B

URL HTTP/1.1
pngimg.com/uploads/email/email_PNG20.png
IP
104.26.5.108:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uploads/email/email_PNG20.png HTTP/1.1
Host: pngimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/

HTTP/1.1 301 Moved Permanently
Date: Thu, 08 Dec 2022 01:34:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 08 Dec 2022 02:34:04 GMT
Location: https://pngimg.com/uploads/email/email_PNG20.png
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FHFxcIFJFmhgS0KT0aNGJ4WAdDyt36L78NkWUumTNnXeVogBbWGh9RzS8q90GIHzbQtXz5tKKTWbpRk6PRjUqkqgDPC6g3mFFxLj0Q46gS2JUPzFKfMhBjBCd0Y%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7761c1aefdddb4f1-OSL
alt-svc: h2=":443"; ma=60

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0e9eef4ed41ef94e9ea175ad243e294e
b6f83e508270413dabe55e2884b5409ca7978e24
0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 01:34:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 01:34:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/lato/v14/S6u9w4BMUTPHh6UVSwiPGQ.woff2

142.250.74.35

200 OK

23 kB

URL HTTP/2
fonts.gstatic.com/s/lato/v14/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 22820, version 1.0\012- data
Size
23 kB (22820 bytes)
Hash
7fbbfd1610770d594aef639cfefdd0b0
e8e478141c6bea23ed8f1b52b7062eebbafb29f0
ead13ccfbdea5462c3af37aa6ae04e64ed65a31c33f76e46da5e86ec85c52064

HTTP Headers

GET /s/lato/v14/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rachelfaithcox.com
Connection: keep-alive
Referer: http://rachelfaithcox.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 08:00:45 GMT
expires: Fri, 01 Dec 2023 08:00:45 GMT
cache-control: public, max-age=31536000
age: 581599
last-modified: Wed, 11 Oct 2017 18:24:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/lato/v14/S6uyw4BMUTPHjx4wXg.woff2

142.250.74.35

200 OK

23 kB

URL HTTP/2
fonts.gstatic.com/s/lato/v14/S6uyw4BMUTPHjx4wXg.woff2
IP
142.250.74.35:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 23316, version 1.0\012- data
Size
23 kB (23316 bytes)
Hash
f1a4a058fbba1e35a406188ae7eddaf8
e5e25503a9a6976e3ac4b1893a767c8a7a72eba0
1670565574aab8aa0a287a4cd8f49cf0d8b0959ebe344f90ca8af696ede9c23b

HTTP Headers

GET /s/lato/v14/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://rachelfaithcox.com
Connection: keep-alive
Referer: http://rachelfaithcox.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23316
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 17:20:17 GMT
expires: Thu, 07 Dec 2023 17:20:17 GMT
cache-control: public, max-age=31536000
age: 29627
last-modified: Wed, 11 Oct 2017 18:23:15 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

rachelfaithcox.com/HUD/off-vl/assets/img/Boston.png

107.154.173.11

200 OK

6.7 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/img/Boston.png
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
PNG image data, 267 x 90, 8-bit colormap, non-interlaced\012- data
Size
6.7 kB (6743 bytes)
Hash
37a5ee2254b49e420cc599380595ec52
c885662a75a6aee85dba60ce3211379559a3e9eb
2a183482e93a6cdd86e07d05469e9ee35b8b1ad0dbc4bcfbdd0c495d015a6850

HTTP Headers

GET /HUD/off-vl/assets/img/Boston.png HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "f969dfed"
Last-Modified: Thu, 01 Aug 2019 17:44:46 GMT
Content-Type: image/png
Content-Length: 6743
Date: Thu, 08 Dec 2022 01:34:04 GMT
X-CDN: Imperva
X-Iinfo: 12-379742696-0 0CNN RT(1670463243590 440) q(0 -1 -1 -1) r(0 -1)

rachelfaithcox.com/HUD/off-vl/assets/img/AstraZeneca_0.png

107.154.173.11

200 OK

10 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/img/AstraZeneca_0.png
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
PNG image data, 364 x 90, 8-bit/color RGBA, interlaced\012- data
Size
10 kB (10320 bytes)
Hash
0bff5e736f50c528565e9989972d30fe
aa271a1018d66eb56b2631208a61c99209868ba6
944961358121e68879546ff9defcc0db811870eebbc2e2a3fee5b42628bd80ed

HTTP Headers

GET /HUD/off-vl/assets/img/AstraZeneca_0.png HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "286640ab"
Last-Modified: Thu, 01 Aug 2019 17:44:46 GMT
Content-Type: image/png
Content-Length: 10320
Date: Thu, 08 Dec 2022 01:34:04 GMT
X-CDN: Imperva
X-Iinfo: 13-479360082-479170685 2CNN RT(1670463242452 1575) q(0 0 0 -1) r(0 0) U18

rachelfaithcox.com/HUD/off-vl/assets/img/GE.png

107.154.173.11

200 OK

4.9 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/img/GE.png
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
PNG image data, 91 x 90, 8-bit colormap, non-interlaced\012- data
Size
4.9 kB (4853 bytes)
Hash
f8addce05074d7a1e672e78c1ba9ed67
604c090dcc1e9101eb53a9d990384cb3b03a8f4a
62d293218dbe6fd501ea15cb85fc524fbaaf609911591a9503e6abbce4f1fc88

HTTP Headers

GET /HUD/off-vl/assets/img/GE.png HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "401f8047"
Last-Modified: Thu, 01 Aug 2019 17:44:46 GMT
Content-Type: image/png
Content-Length: 4853
Date: Thu, 08 Dec 2022 01:34:03 GMT
X-CDN: Imperva
X-Iinfo: 12-379742700-379656976 2CNN RT(1670463243596 438) q(0 0 0 -1) r(0 0) U18

ocsp.pki.goog/s/gts1p5/QJ8x_LKWya8

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/QJ8x_LKWya8
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
5f8fe659787990801a7196715854b719
7daa10796c05efa153ed3a1da7ad42067d6bd19c
24ee29f857b3b21d0bfa4ad71d6e560702a13cf9e72d52e17f19f46957b6a75f

HTTP Headers

POST /s/gts1p5/QJ8x_LKWya8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 01:34:04 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

rachelfaithcox.com/HUD/off-vl/assets/img/Nationwide.png

107.154.173.11

200 OK

9.7 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/img/Nationwide.png
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
PNG image data, 304 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size
9.7 kB (9712 bytes)
Hash
4fba93a6eff584210739855385d94a90
fc2356cbf830b748d69ab5aa4f299be3ed206a61
818ba83870603d9695a9494b7215068689b7fe9153b8d57e9274fc46e72f975a

HTTP Headers

GET /HUD/off-vl/assets/img/Nationwide.png HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "653b0a37"
Last-Modified: Thu, 01 Aug 2019 17:44:46 GMT
Content-Type: image/png
Content-Length: 9712
Date: Thu, 08 Dec 2022 01:34:04 GMT
X-CDN: Imperva
X-Iinfo: 12-379742701-379742842 2CNN RT(1670463243597 436) q(0 0 0 -1) r(0 0) U18

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ec6ece82a7cb8faa3ba171efae3a9eda
7ee75fba9a9d1078960f7834d71961c38f514b82
301d0c4d73b444369e488ee4f78b3a994a9168ec6c6d46cd7f3448722a841a2e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 01:34:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

pngimg.com/uploads/email/email_PNG20.png

104.26.5.108

200 OK

33 kB

URL HTTP/2
pngimg.com/uploads/email/email_PNG20.png
IP
104.26.5.108:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size
33 kB (32800 bytes)
Hash
e24c3ec5e370444723a32a04b0a0a126
15d105a226a9ee093e4822cbefdfb85e03820e67
7b38f327c066e686ac7f1ca7f2f24b94603d2e6a9a3cf327649a157d3463ce1c

HTTP Headers

GET /uploads/email/email_PNG20.png HTTP/1.1
Host: pngimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://rachelfaithcox.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 08 Dec 2022 01:34:04 GMT
content-type: image/png
content-length: 32800
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origSize=36429
etag: "8e4d"
expires: Thu, 08 Dec 2022 21:28:01 GMT
last-modified: Wed, 27 Mar 2019 01:00:26 GMT
cf-cache-status: HIT
age: 42829
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HYn630JvgKvtWaTkXs9Gbhs1%2Bib7DmR4ap%2FUs4h7jbDHpvsO3TwoNq8ckT56kEXZCN3m9usu6YguWTVQp2lzhIBg4A%2BfUvNlnmvVuTqvhoPM6NB5moHX9DKxPEo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7761c1afed13b4ff-OSL
X-Firefox-Spdy: h2

rachelfaithcox.com/HUD/off-vl/assets/img/PG_433x90.png

107.154.173.11

200 OK

4.9 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/img/PG_433x90.png
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
PNG image data, 433 x 90, 8-bit colormap, interlaced\012- data
Size
4.9 kB (4928 bytes)
Hash
d4b378ca1b7eeccfc4255da9e4d5b003
28af883e2b0a4713404155d3deb14eaf37cb8602
2693186aa9644890b9d6858c4b784ccde2de3d26207b7703201efcc714e913f9

HTTP Headers

GET /HUD/off-vl/assets/img/PG_433x90.png HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "74e84075"
Last-Modified: Thu, 01 Aug 2019 17:44:46 GMT
Content-Type: image/png
Content-Length: 4928
Date: Thu, 08 Dec 2022 01:34:04 GMT
X-CDN: Imperva
X-Iinfo: 14-561627723-561474597 2CNN RT(1670463242552 1525) q(0 0 0 -1) r(0 0) U18

rachelfaithcox.com/HUD/off-vl/assets/img/Pandora.png

107.154.173.11

200 OK

17 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/img/Pandora.png
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
PNG image data, 378 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size
17 kB (16921 bytes)
Hash
91d4a7693fec4f2a4d121ff926f5b0cd
ab66cc7a7c15043aa9f8edaed02b5e5720f7969f
748195ac015cee91667a22f2e14e6f5b80985245f88c69f870cc757b517cfa21

HTTP Headers

GET /HUD/off-vl/assets/img/Pandora.png HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "fb3093cf"
Last-Modified: Thu, 01 Aug 2019 17:44:46 GMT
Content-Type: image/png
Content-Length: 16921
Date: Thu, 08 Dec 2022 01:34:04 GMT
X-CDN: Imperva
X-Iinfo: 12-379742697-379374776 2CNN RT(1670463243593 438) q(0 0 0 -1) r(0 0) U18

rachelfaithcox.com/HUD/off-vl/assets/img/apple-touch-icon.png

107.154.173.11

200 OK

4.7 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/img/apple-touch-icon.png
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
4.7 kB (4739 bytes)
Hash
128870d86a3381a383432bdd37c8dbdb
2cf8d216f5be20e66b469dabdd7fc492838c3d32
c7f4fcdc4f5a6c4b932304379165f8ad2d8dbe8faec926e796408b50d40d8bd1

HTTP Headers

GET /HUD/off-vl/assets/img/apple-touch-icon.png HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "7635226b"
Last-Modified: Thu, 01 Aug 2019 17:44:46 GMT
Content-Type: image/png
Content-Length: 4739
Date: Thu, 08 Dec 2022 01:34:04 GMT
X-CDN: Imperva
X-Iinfo: 14-561627723-561474597 2CNN RT(1670463242552 1855) q(0 0 0 -1) r(0 0) U18

rachelfaithcox.com/HUD/off-vl/assets/img/favicon-16x16.png

107.154.173.11

200 OK

497 B

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/img/favicon-16x16.png
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size
497 B (497 bytes)
Hash
752eb58312075f4171d06d6fd8bbdb2d
052239adfd0da09a89f5072d2a6d5a51a026e955
cb6fab7d99aeb55159f2540e0a8bed28bae38a791bd664d0aef803d94070f339

HTTP Headers

GET /HUD/off-vl/assets/img/favicon-16x16.png HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "8a738052"
Last-Modified: Thu, 01 Aug 2019 17:44:46 GMT
Content-Type: image/png
Content-Length: 497
Date: Thu, 08 Dec 2022 01:34:04 GMT
X-CDN: Imperva
X-Iinfo: 12-379742697-379742842 2CNN RT(1670463243593 812) q(0 0 0 -1) r(0 0) U18

rachelfaithcox.com/HUD/off-vl/assets/img/home_masthead_ipadonly.jpg

107.154.173.11

200 OK

86 kB

URL HTTP/1.1
rachelfaithcox.com/HUD/off-vl/assets/img/home_masthead_ipadonly.jpg
IP
107.154.173.11:0
ASN
#19551 INCAPSULA

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x960, components 3\012- data
Size
86 kB (85628 bytes)
Hash
29a752cb07bbf514e4463974fcf11bb9
20967883b81b39d93780e6f4e33f4e14fa209ae4
3470e4402c0cbe8c6eecae0dbb06a28fab1e4ec7958fb9ed311e230bc1ade564

HTTP Headers

GET /HUD/off-vl/assets/img/home_masthead_ipadonly.jpg HTTP/1.1
Host: rachelfaithcox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://rachelfaithcox.com/HUD/off-vl/Login.php?sslchannel=true
Cookie: visid_incap_2204148=hK/gDO+TS6KdSgBJtFjwFwo/kWMAAAAAQUIPAAAAAAAoi1z+vALbvqa3NFymbXfk; incap_ses_168_2204148=xH3xSKLizywVQBLvp9tUAgo/kWMAAAAADmqDyDyxfFxECNoALhykRQ==; PHPSESSID=caf15528b5efd76d723ae71ac290174e

HTTP/1.1 200 OK
Etag: "e5ac182d"
Last-Modified: Thu, 01 Aug 2019 17:44:46 GMT
Content-Type: image/jpeg
Content-Length: 85628
Date: Thu, 08 Dec 2022 01:34:04 GMT
X-CDN: Imperva
X-Iinfo: 12-379742696-379578703 2CNN RT(1670463243590 570) q(0 0 0 -1) r(0 0) U18

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10308
Expires: Thu, 08 Dec 2022 04:25:53 GMT
Date: Thu, 08 Dec 2022 01:34:05 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10308
Expires: Thu, 08 Dec 2022 04:25:53 GMT
Date: Thu, 08 Dec 2022 01:34:05 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10308
Expires: Thu, 08 Dec 2022 04:25:53 GMT
Date: Thu, 08 Dec 2022 01:34:05 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
48c90992f0837a58e0a36118a27dae6a
3d238fed35e6d247bddbba92864e6b92e6aed9b6
cacc53ed285e96dcd5ba7609823922a253bc0623999b8716f430632d2c0e7dac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10308
Expires: Thu, 08 Dec 2022 04:25:53 GMT
Date: Thu, 08 Dec 2022 01:34:05 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb40390-82ef-453b-afca-e37aa7674ed3.jpeg

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb40390-82ef-453b-afca-e37aa7674ed3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9058 bytes)
Hash
f0c8a8dbe6c3ae6eaa2e464296708f5c
98556b27bc3759d0ceb8200ff5bc7b9567e428a5
bfc64a0e18c0137360f746eca256f464e26d23a04521ea629c46ae50ea6af173

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb40390-82ef-453b-afca-e37aa7674ed3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9058
x-amzn-requestid: 1f7fdd3d-1e65-46f7-8ef2-d164bf81e72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctlz4FtuIAMFjsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee9b2-4866b3fd61fdb35d34317038;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:05:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: rKTosJz8cRhO0Bh2MpbFNF5gHtR5wecakD1UZvR2wZUaFRUQC6IW5Q==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 07:18:54 GMT
age: 65711
etag: "98556b27bc3759d0ceb8200ff5bc7b9567e428a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6557 bytes)
Hash
210b27f5f6310d8fad640acce3d9ae0e
08d241e56622cb900754d95bc5d58ed8826d9f32
64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 06:11:41 GMT
age: 69744
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9f5f2e2-f4e8-4ddc-9a23-4327bb79769a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.6 kB (4565 bytes)
Hash
00cdac5a7f801c10e53b8651ceb94c46
d83d7a30038bbf534c531c3786c3458c66d6504a
4d767e2c8aee11a230ecbb4c5c2339a65ca380e87b713f2ad6c1efc02df07238

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9f5f2e2-f4e8-4ddc-9a23-4327bb79769a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4565
x-amzn-requestid: 153e9d72-d9e1-498e-b74b-f4fad27f4efd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_pHs4oAMFYYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-44aa3006114060145bd0b16d;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: R18FvbBqHk-TVWaS2scvsqim40JdzbHScbg9ougAYX9zwLx91NoS0A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:01:22 GMT
age: 12763
etag: "d83d7a30038bbf534c531c3786c3458c66d6504a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2dbe127a-1d23-4c1b-b13e-cd024e5fd5de.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8626 bytes)
Hash
d2d14fc1b5d2e6d6f4751a2fe741b990
86cd1428b2fd21ccb9d80c7f6be4d1e6221e97ef
bfe88cb97ccec5af627853d0bbc02f4799c4b8a25a995c8578365cb5a2914d6a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2dbe127a-1d23-4c1b-b13e-cd024e5fd5de.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8626
x-amzn-requestid: c5f3e36b-87f1-4938-819c-7b1a6ec6bfeb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy4BXHJ0oAMFaKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106d5-15635f9a10d25d8c1d702bbd;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zQXtGXxwwTmn7gMQQj5wM69mPzAmYXRyfTbYfgUovTGsS0y048GZDg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:06:53 GMT
age: 12432
etag: "86cd1428b2fd21ccb9d80c7f6be4d1e6221e97ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8659 bytes)
Hash
b87d6543345f73653ed4a49b37d7c959
c4f26846b8b72293368ff16915d49297cf12bbb9
aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:35:32 GMT
age: 7113
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.2 kB (5245 bytes)
Hash
43fdc85bfd574fa803f0bcdc216ef622
27f558d5cdc150a50f080c054423500666b63d74
fafd2a81cddacdb4e5fd7c9963a784e6e56d06ac98f0bd4124fd74fa3ba015e0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5382e616-602f-4e00-bed7-d95c66a5000d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5245
x-amzn-requestid: 9770ebcd-fb1e-4b81-bb87-1e98ef024741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy-E8HugoAMFsKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911085-54eb7a48323113d52329abf5;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:15:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: d2DHUS5fGT4uoPPdjDXmHUOQVF93ULtO4zSHRmrx7KMu3lO0y0K9ag==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:24:13 GMT
age: 11392
etag: "27f558d5cdc150a50f080c054423500666b63d74"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (44)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/2

IP

ASN

File type