urlquery - report: vaishnodevihelicopteronline.com/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
r3.o.lencr.org (6)	344	No data	No data	23.36.76.226
ocsp.digicert.com (3)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
vaishnodevihelicopteronline.com (9)	0	2021-12-30 12:01:23 UTC	2022-11-04 01:01:28 UTC	66.29.137.40	Unknown ranking
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-03 05:28:18 UTC	34.117.237.239
ocsp.sectigo.com (1)	487	2019-11-29 11:50:24 UTC	2021-09-17 20:05:40 UTC	104.18.32.68
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	44.236.232.139

Scan Date	Severity	Indicator	Comment
2022-11-04	2	vaishnodevihelicopteronline.com/	Malware
2022-11-04	2	vaishnodevihelicopteronline.com/	Malware
2022-11-04	2	vaishnodevihelicopteronline.com/_autoindex/assets/js/tablesort.number.js	Malware
2022-11-04	2	vaishnodevihelicopteronline.com/_autoindex/assets/icons/folder-fill.svg	Malware
2022-11-04	2	vaishnodevihelicopteronline.com/_autoindex/assets/js/tablesort.js	Malware
2022-11-04	2	vaishnodevihelicopteronline.com/_autoindex/assets/icons/file.svg	Malware
2022-11-04	2	vaishnodevihelicopteronline.com/_autoindex/assets/icons/file-text.svg	Malware

Scan Date	Severity	Indicator	Comment
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed

Scan Date	Severity	Indicator	Comment
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed
2022-11-04	2	vaishnodevihelicopteronline.com	Sinkholed

Date	UQ / IDS / BL	URL	IP
2023-01-05 16:09:25 +0000	0 - 0 - 31	ksavaccine.com/	66.29.137.40
2022-11-19 19:39:35 +0000	0 - 0 - 4	centuryplydelaership.com/qgf/index.php?e=qbot.zip	66.29.137.40
2022-11-19 19:39:27 +0000	0 - 0 - 4	onlinehelicopterbookingtrip.in/atp/index.php? (...)	66.29.137.40
2022-11-19 19:33:41 +0000	0 - 0 - 5	helicopterbookingonline.in/at/index.php?e=qbot.zip	66.29.137.40
2022-11-19 19:30:34 +0000	0 - 0 - 5	vaishnodevihelicopteronline.com/isg/index.php (...)	66.29.137.40

Date	UQ / IDS / BL	URL	IP
2023-02-07 12:31:07 +0000	0 - 0 - 15	www.nahtinternationa.com/bnk/home.php	162.0.236.106
2023-02-07 12:25:16 +0000	0 - 1 - 0	queendown.com/	192.64.119.55
2023-02-07 11:18:31 +0000	0 - 1 - 1	clickandwin.xyz/	192.64.119.33
2023-02-07 10:43:45 +0000	0 - 0 - 1	kamtex.de/	162.0.215.44
2023-02-07 10:36:09 +0000	0 - 1 - 0	kongtogel.com/	162.255.119.72

Date	UQ / IDS / BL	URL	IP
2022-11-19 19:30:34 +0000	0 - 0 - 5	vaishnodevihelicopteronline.com/isg/index.php (...)	66.29.137.40
2022-11-16 21:52:49 +0000	0 - 0 - 8	vaishnodevihelicopteronline.com/isg/index.php (...)	66.29.137.40
2022-11-06 19:00:51 +0000	0 - 0 - 5	vaishnodevihelicopteronline.com/isg/index.php (...)	66.29.137.40
2022-11-04 20:36:14 +0000	0 - 0 - 8	vaishnodevihelicopteronline.com/isg/index.php (...)	66.29.137.40
2022-11-04 15:31:07 +0000	0 - 0 - 8	vaishnodevihelicopteronline.com/isg/index.php (...)	66.29.137.40

Date	UQ / IDS / BL	URL	IP
2022-11-05 03:50:51 +0000	0 - 0 - 25	royalenfield-dealer.in/	66.29.137.40

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: b93410a9d62da3f219796d753b61a0f730cc272c13596724aa9d20efba298b44 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "B93410A9D62DA3F219796D753B61A0F730CC272C13596724AA9D20EFBA298B44" Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13428 Expires: Fri, 04 Nov 2022 08:11:52 GMT Date: Fri, 04 Nov 2022 04:28:04 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: b7be8442ec1e518ccc80739495f6d047 Sha1: 7a9d24b9d4046262c7753c49afaf9c19f4840626 Sha256: b93410a9d62da3f219796d753b61a0f730cc272c13596724aa9d20efba298b44
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 3f9e8fb02409a19ceb54fee3f0f7f73eeed9e0ad63fa778eac7b3e4633d7d682 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6488 Cache-Control: max-age=111071 Date: Fri, 04 Nov 2022 04:28:04 GMT Etag: "63638a5c-1d7" Expires: Sat, 05 Nov 2022 11:19:15 GMT Last-Modified: Thu, 03 Nov 2022 09:31:08 GMT Server: ECS (ska/F70A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 2842f538168981f07b56e2c69379841a Sha1: 0cc4ad0a78c1407bc9b7850eb0fb1a02130e3b22 Sha256: 3f9e8fb02409a19ceb54fee3f0f7f73eeed9e0ad63fa778eac7b3e4633d7d682
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 3f9e8fb02409a19ceb54fee3f0f7f73eeed9e0ad63fa778eac7b3e4633d7d682 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1818 Cache-Control: max-age=106402 Date: Fri, 04 Nov 2022 04:28:04 GMT Etag: "63638a5c-1d7" Expires: Sat, 05 Nov 2022 10:01:26 GMT Last-Modified: Thu, 03 Nov 2022 09:31:08 GMT Server: ECS (ska/F718) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 2842f538168981f07b56e2c69379841a Sha1: 0cc4ad0a78c1407bc9b7850eb0fb1a02130e3b22 Sha256: 3f9e8fb02409a19ceb54fee3f0f7f73eeed9e0ad63fa778eac7b3e4633d7d682
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 73a068f907cc50dd60af18d545b4264dd44bc4b9f40bf9adfceea157fdc33099 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "73A068F907CC50DD60AF18D545B4264DD44BC4B9F40BF9ADFCEEA157FDC33099" Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12886 Expires: Fri, 04 Nov 2022 08:02:50 GMT Date: Fri, 04 Nov 2022 04:28:04 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 9f3527f898221f8ba6b5015f6decc100 Sha1: ead93baa0e9d3a6297be3377dc3a624e5a3f509a Sha256: 73a068f907cc50dd60af18d545b4264dd44bc4b9f40bf9adfceea157fdc33099
GET / HTTP/1.1 Host: vaishnodevihelicopteronline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: vaishnodevihelicopteronline.com/ FQDN: vaishnodevihelicopteronline.com IP: 66.29.137.40 HASH: 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 66.29.137.40 HTTP/1.1 301 Moved Permanently content-type: text/html keep-alive: timeout=5, max=100 content-length: 707 date: Fri, 04 Nov 2022 04:28:04 GMT server: LiteSpeed location: https://vaishnodevihelicopteronline.com/ x-turbo-charged-by: LiteSpeed --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators Size: 707 Md5: 1304294c0823ca486542ba408ed761e3 Sha1: b2a70fb2d810ca13985882e6981f33998823e83e Sha256: 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982 Alerts: Blocklists: - fortinet: Malware - mnemonic_dns: Sinkholed - quad9: Sinkholed
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: jtJ17vaCCNkec7gXLPPgCa0NgdQi1NeBnc9hFX3UKxZWnX9QGoU0uHeLbDNPJadV1VvWYU0LbW52vKcP6FDf8g== x-amz-request-id: 8BCDH0G2RN9VVZCP content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 04 Nov 2022 04:09:27 GMT age: 1117 last-modified: Fri, 30 Sep 2022 18:50:55 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 67d5a988edcda47bc3b3b3f65d32b4b6 Sha1: d4f0e0da8b3690cc7da925026d3414b68c7d954f Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Fri, 04 Nov 2022 04:28:04 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sectigo.com/ FQDN: ocsp.sectigo.com IP: 104.18.32.68 HASH: bb428f66b6404ec3a7ed5f717f3b1869c228331803eaa4e1f0a3b1845f7d77e3 104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 04 Nov 2022 04:28:04 GMT Content-Length: 472 Connection: keep-alive Last-Modified: Thu, 03 Nov 2022 00:50:49 GMT Expires: Thu, 10 Nov 2022 00:50:48 GMT Etag: "0012c747264a382264d4b9405e5dde88f554a358" Cache-Control: max-age=504763,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb6 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 764a99d0bc4a0b69-OSL --- Additional Info --- Magic: data Size: 472 Md5: 699674aaa5fba23f942c3bdeb5b5c499 Sha1: 0012c747264a382264d4b9405e5dde88f554a358 Sha256: bb428f66b6404ec3a7ed5f717f3b1869c228331803eaa4e1f0a3b1845f7d77e3
GET / HTTP/1.1 Host: vaishnodevihelicopteronline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: vaishnodevihelicopteronline.com/ FQDN: vaishnodevihelicopteronline.com IP: 66.29.137.40 HASH: ceb30f5773add224e3827985c0846b3661053eb7c15f5279e887badf34733c71 66.29.137.40 HTTP/2 200 OK content-type: text/html; charset=UTF-8 content-length: 1098 content-encoding: br vary: Accept-Encoding date: Fri, 04 Nov 2022 04:28:04 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (400) Size: 1098 Md5: 15be87d7f2fa9a68b5e74f718ef17a8c Sha1: 7800533af024cb3a1a2b420a7a2e7d29dc7b9c0f Sha256: ceb30f5773add224e3827985c0846b3661053eb7c15f5279e887badf34733c71 Alerts: Blocklists: - fortinet: Malware - mnemonic_dns: Sinkholed - quad9: Sinkholed
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 75029ab8db44811ac539aa3e2f1f8e015a45b80cb5a1099cec7d64e55e2a72a6 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 933 Cache-Control: max-age=100457 Date: Fri, 04 Nov 2022 04:28:04 GMT Etag: "63637698-1d7" Expires: Sat, 05 Nov 2022 08:22:21 GMT Last-Modified: Thu, 03 Nov 2022 08:06:48 GMT Server: ECS (ska/F70A) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 670d0b2f341e8ff1e4ee9fe4fe21e210 Sha1: dcd277daebf63623b985a81a96bcdc6a6f67c518 Sha256: 75029ab8db44811ac539aa3e2f1f8e015a45b80cb5a1099cec7d64e55e2a72a6
GET /_autoindex/assets/css/autoindex.css HTTP/1.1 Host: vaishnodevihelicopteronline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://vaishnodevihelicopteronline.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: vaishnodevihelicopteronline.com/_autoindex/assets/css/a (...) FQDN: vaishnodevihelicopteronline.com IP: 66.29.137.40 HASH: 566282f53593ebd16cf016484c1f38f95ff6565574d46c8d87caa3b0ecb8c34d 66.29.137.40 HTTP/2 200 OK content-type: text/css cache-control: public, max-age=604800 expires: Fri, 11 Nov 2022 04:28:05 GMT last-modified: Wed, 02 Nov 2022 19:11:08 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 1170 date: Fri, 04 Nov 2022 04:28:05 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 1170 Md5: fc2f7689496dd9f53adfc8947de492ae Sha1: 7f7ef59700bedbb295acd0b8e50539bff030d00a Sha256: 566282f53593ebd16cf016484c1f38f95ff6565574d46c8d87caa3b0ecb8c34d Alerts: Blocklists: - mnemonic_dns: Sinkholed - quad9: Sinkholed
GET /_autoindex/assets/js/tablesort.number.js HTTP/1.1 Host: vaishnodevihelicopteronline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://vaishnodevihelicopteronline.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: vaishnodevihelicopteronline.com/_autoindex/assets/js/ta (...) FQDN: vaishnodevihelicopteronline.com IP: 66.29.137.40 HASH: ec51501323424275368f90f8184547b8452c35724b32a374733e14e31c936f6f 66.29.137.40 HTTP/2 200 OK content-type: application/javascript cache-control: public, max-age=604800 expires: Fri, 11 Nov 2022 04:28:05 GMT last-modified: Wed, 02 Nov 2022 19:11:08 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 322 date: Fri, 04 Nov 2022 04:28:05 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text Size: 322 Md5: 4247e6bb391c17a14c3760e0e161740f Sha1: db1b96b5f82c76287a0a5fb85e9bbfcbf104f3d0 Sha256: ec51501323424275368f90f8184547b8452c35724b32a374733e14e31c936f6f Alerts: Blocklists: - fortinet: Malware - mnemonic_dns: Sinkholed - quad9: Sinkholed
GET /_autoindex/assets/icons/folder-fill.svg HTTP/1.1 Host: vaishnodevihelicopteronline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://vaishnodevihelicopteronline.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: vaishnodevihelicopteronline.com/_autoindex/assets/icons (...) FQDN: vaishnodevihelicopteronline.com IP: 66.29.137.40 HASH: 09ac189cdfbedef9040091d7c918fcf3e947acd6d5b89287eaec98d9f02f383d 66.29.137.40 HTTP/2 200 OK content-type: image/svg+xml cache-control: public, max-age=604800 expires: Fri, 11 Nov 2022 04:28:05 GMT last-modified: Wed, 02 Nov 2022 19:11:08 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 333 date: Fri, 04 Nov 2022 04:28:05 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 333 Md5: 686886c3ce961b02b4facb7b5e91e3d5 Sha1: 14c06e36dccdcb2eefadb5d5f1a5c91126b0c369 Sha256: 09ac189cdfbedef9040091d7c918fcf3e947acd6d5b89287eaec98d9f02f383d Alerts: Blocklists: - fortinet: Malware - mnemonic_dns: Sinkholed - quad9: Sinkholed
GET /_autoindex/assets/js/tablesort.js HTTP/1.1 Host: vaishnodevihelicopteronline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://vaishnodevihelicopteronline.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: vaishnodevihelicopteronline.com/_autoindex/assets/js/ta (...) FQDN: vaishnodevihelicopteronline.com IP: 66.29.137.40 HASH: 847c58748da4b464d0aefd9a64c96db346099634b808ce8c5eaa6d5f955cb36a 66.29.137.40 HTTP/2 200 OK content-type: application/javascript cache-control: public, max-age=604800 expires: Fri, 11 Nov 2022 04:28:05 GMT last-modified: Wed, 02 Nov 2022 19:11:08 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 2137 date: Fri, 04 Nov 2022 04:28:05 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 2137 Md5: 4061751aab621fbf66bd8c9975b54b65 Sha1: b31fe95ae110b753a6be4013ca839d3eebab203e Sha256: 847c58748da4b464d0aefd9a64c96db346099634b808ce8c5eaa6d5f955cb36a Alerts: Blocklists: - fortinet: Malware - mnemonic_dns: Sinkholed - quad9: Sinkholed
GET /_autoindex/assets/icons/file.svg HTTP/1.1 Host: vaishnodevihelicopteronline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://vaishnodevihelicopteronline.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: vaishnodevihelicopteronline.com/_autoindex/assets/icons (...) FQDN: vaishnodevihelicopteronline.com IP: 66.29.137.40 HASH: 12395e68b9b1ec1b298db1ce6e6596a25d64c863373670e5dcfb6c6878e0e85a 66.29.137.40 HTTP/2 200 OK content-type: image/svg+xml cache-control: public, max-age=604800 expires: Fri, 11 Nov 2022 04:28:05 GMT last-modified: Wed, 02 Nov 2022 19:11:08 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 354 date: Fri, 04 Nov 2022 04:28:05 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 354 Md5: 32e702b854daf4865cabf344db7132d9 Sha1: 779ecb4ef3ea30ceb032a78401752efdefdeae41 Sha256: 12395e68b9b1ec1b298db1ce6e6596a25d64c863373670e5dcfb6c6878e0e85a Alerts: Blocklists: - fortinet: Malware - mnemonic_dns: Sinkholed - quad9: Sinkholed
GET /_autoindex/assets/icons/file-text.svg HTTP/1.1 Host: vaishnodevihelicopteronline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://vaishnodevihelicopteronline.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: vaishnodevihelicopteronline.com/_autoindex/assets/icons (...) FQDN: vaishnodevihelicopteronline.com IP: 66.29.137.40 HASH: c1a27153b67061ce621e3c54f13e76d7276e448d2d18b31a103f355b10dfcb3c 66.29.137.40 HTTP/2 200 OK content-type: image/svg+xml cache-control: public, max-age=604800 expires: Fri, 11 Nov 2022 04:28:05 GMT last-modified: Wed, 02 Nov 2022 19:11:08 GMT accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 394 date: Fri, 04 Nov 2022 04:28:05 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text Size: 394 Md5: 942eee405794be6b194a8d13fe7884b0 Sha1: bbc48ce5bab3a8d31b9aacee28f49e103728a752 Sha256: c1a27153b67061ce621e3c54f13e76d7276e448d2d18b31a103f355b10dfcb3c Alerts: Blocklists: - fortinet: Malware - mnemonic_dns: Sinkholed - quad9: Sinkholed
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 9lAlTp7MyvYE0QVFbgJufw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 44.236.232.139 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 44.236.232.139 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 1116HHG5I2aOQr3q+tgbv1gg27A= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1 Host: vaishnodevihelicopteronline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://vaishnodevihelicopteronline.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: vaishnodevihelicopteronline.com/favicon.ico FQDN: vaishnodevihelicopteronline.com IP: 66.29.137.40 HASH: 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807 66.29.137.40 HTTP/2 404 Not Found content-type: text/html cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-length: 1238 date: Fri, 04 Nov 2022 04:28:05 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators Size: 1238 Md5: 0bde7d4b3da67537eaf9188e6f8049cf Sha1: 64300fc482d01d38b40ab20e15960b6509665e5a Sha256: 5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807 Alerts: Blocklists: - mnemonic_dns: Sinkholed - quad9: Sinkholed
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22" Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8898 Expires: Fri, 04 Nov 2022 06:56:24 GMT Date: Fri, 04 Nov 2022 04:28:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f6ae0db60213bfddbf2ad71a9fb116bf Sha1: 915d2895adc3f022c28cc628aeb6e441cbb09d47 Sha256: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22" Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8898 Expires: Fri, 04 Nov 2022 06:56:24 GMT Date: Fri, 04 Nov 2022 04:28:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f6ae0db60213bfddbf2ad71a9fb116bf Sha1: 915d2895adc3f022c28cc628aeb6e441cbb09d47 Sha256: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22" Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8898 Expires: Fri, 04 Nov 2022 06:56:24 GMT Date: Fri, 04 Nov 2022 04:28:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f6ae0db60213bfddbf2ad71a9fb116bf Sha1: 915d2895adc3f022c28cc628aeb6e441cbb09d47 Sha256: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22" Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8898 Expires: Fri, 04 Nov 2022 06:56:24 GMT Date: Fri, 04 Nov 2022 04:28:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f6ae0db60213bfddbf2ad71a9fb116bf Sha1: 915d2895adc3f022c28cc628aeb6e441cbb09d47 Sha256: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9e763f4b-3a03-44da-b01c-40142867c7d7.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 92e8ab36824acc99cedaa44d728d2980d3152409a7634c7f1cbe3abf8672123b 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7994 x-amzn-requestid: 91f890f5-0104-4035-81aa-0ec332b481e9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bC18UGhsIAMFr4w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-636436b5-4a994af4192125ba5d729e0e;Sampled=0 x-amzn-remapped-date: Thu, 03 Nov 2022 21:46:29 GMT x-amz-cf-pop: SEA73-P2, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: yH5fVPZPl9AyxvzT1zP3I1c47lW-fwnDSfEuK6b8m8VbKM0MpkCmVA== via: 1.1 76dcc62b68091cc715d50b5017be77fc.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google date: Thu, 03 Nov 2022 21:53:19 GMT etag: "d4ec3ae0cc0c904798bf60caec24332b82f42617" age: 23687 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7994 Md5: f67d6ac91d1a30360cd535fa4f2fb762 Sha1: d4ec3ae0cc0c904798bf60caec24332b82f42617 Sha256: 92e8ab36824acc99cedaa44d728d2980d3152409a7634c7f1cbe3abf8672123b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8d44f8-0c00-4a8a-be62-f3074a628773.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 5007b706cd8c32431ba8d023f2c85eb3d5faa29a89e52530f66a11fa6d56a487 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3129 x-amzn-requestid: d2f79c4c-1685-495e-add4-66db55669be5 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bC1EeF2YoAMFzwA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6364354f-6957babc65b33a56575d4deb;Sampled=0 x-amzn-remapped-date: Thu, 03 Nov 2022 21:40:31 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: NoRwUtjf1DSIEZ8lMSJg8UT7lUyeew3B1Fwa44BrN3Av6H4TXsdTVw== via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google date: Thu, 03 Nov 2022 21:51:52 GMT age: 23774 etag: "4b6eeba25ea9eb878f06c9fdd158baa08095816a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3129 Md5: c51fb56e3d2ff1c96ac94fa6dc04d7ff Sha1: 4b6eeba25ea9eb878f06c9fdd158baa08095816a Sha256: 5007b706cd8c32431ba8d023f2c85eb3d5faa29a89e52530f66a11fa6d56a487
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a746b36be50209915a0e5657abd219aab382eee4b7556142aa1316daf3a9f5a4 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6557 x-amzn-requestid: f2e39db1-fb8a-4a9b-8a1d-ee08000ddeb6 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bC1VyFHuIAMF5Eg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-636435be-7a03ef677f8dbd680f72de90;Sampled=0 x-amzn-remapped-date: Thu, 03 Nov 2022 21:42:22 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: I6mALhsUwtQqMP_p_HxFaiCyfRDTtVzPIJjeDrKSEq7Tc_d5EcNw3Q== via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google date: Thu, 03 Nov 2022 21:53:00 GMT age: 23706 etag: "594e5a82ce82fb4cd76548b6d2d6b4cc419b7e4c" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6557 Md5: ca6c7517d7015fbc35fa290c1c2d6afd Sha1: 594e5a82ce82fb4cd76548b6d2d6b4cc419b7e4c Sha256: a746b36be50209915a0e5657abd219aab382eee4b7556142aa1316daf3a9f5a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877911e5-70a1-471d-b418-3ee8665daf00.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bda8d5d8dee8c1b3b9a0dd81407bc920a3a2a737dceaaebf75e8554ef1cdcec8 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8016 x-amzn-requestid: 971369d4-3728-4fef-9d82-794fd184d26d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bC0S3FbeIAMFceg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63643412-0efd014e4b25ed9c4aed13cb;Sampled=0 x-amzn-remapped-date: Thu, 03 Nov 2022 21:35:14 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: ZPGScUHAZtgr_egNkJ2bOzK_ftHSd0Yr1U_S7jYUelg56FCtTOC2TA== via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google date: Thu, 03 Nov 2022 21:53:05 GMT age: 23701 etag: "0d3c7535f83ced168b1efb0f849e353de31d40db" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8016 Md5: f787d03ccf6f14f05b9fb00149a92f49 Sha1: 0d3c7535f83ced168b1efb0f849e353de31d40db Sha256: bda8d5d8dee8c1b3b9a0dd81407bc920a3a2a737dceaaebf75e8554ef1cdcec8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca38d141-58df-4cb1-a98e-9e926dce0b1e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 36e0a989f24023e8df7e65f48d02b8ff44f5976c72e3add2a035f69a30a027ba 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10102 x-amzn-requestid: 88180740-5e32-4c86-ac47-5385bf32ae6c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bC0RqG1joAMFtkg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6364340a-24dec56b1fff968d717cb075;Sampled=0 x-amzn-remapped-date: Thu, 03 Nov 2022 21:35:06 GMT x-amz-cf-pop: SEA73-P2, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: ekzGt2vPATtPpGvnlZOnwSAA1CzaAexQVHYWkaDWR2xDkKyt3dFUJA== via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google date: Thu, 03 Nov 2022 22:21:08 GMT age: 22018 etag: "99e30a61aca3e5b861ec3f2f56ec242d06c84e03" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10102 Md5: 9e9d2fd6fad0411accce30c67be288f6 Sha1: 99e30a61aca3e5b861ec3f2f56ec242d06c84e03 Sha256: 36e0a989f24023e8df7e65f48d02b8ff44f5976c72e3add2a035f69a30a027ba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43a2ca39-70e2-4cc7-b378-65317cca7969.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 9a5b1575ed3a943be74e212f41f122178dcf4c89ef0d78eb8cc761508cd453d9 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9023 x-amzn-requestid: 599a15c5-bd47-4c30-91e5-b445da7e66f9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: apwvQHCsIAMFWlg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-635a2e61-1d36740311e6b1e531d44767;Sampled=0 x-amzn-remapped-date: Thu, 27 Oct 2022 07:08:17 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: FdYEabB0P-JcMOvjTK2TdVUCbuCbCEICZXoKHcz2-QdUfpIgey1tWw== via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google date: Thu, 03 Nov 2022 23:04:31 GMT age: 19415 etag: "09b052e39f5493c2c2b79d92e81e510aeffbfcb4" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9023 Md5: 55f392ea73e9746f7edb30e319646c4b Sha1: 09b052e39f5493c2c2b79d92e81e510aeffbfcb4 Sha256: 9a5b1575ed3a943be74e212f41f122178dcf4c89ef0d78eb8cc761508cd453d9

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 6488 

                                        
                                            
Cache-Control: max-age=111071 

                                        
                                            
Date: Fri, 04 Nov 2022 04:28:04 GMT 

                                        
                                            
Etag: "63638a5c-1d7" 

                                        
                                            
Expires: Sat, 05 Nov 2022 11:19:15 GMT 

                                        
                                            
Last-Modified: Thu, 03 Nov 2022 09:31:08 GMT 

                                        
                                            
Server: ECS (ska/F70A) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    2842f538168981f07b56e2c69379841a

                                                Sha1:   0cc4ad0a78c1407bc9b7850eb0fb1a02130e3b22

                                                Sha256: 3f9e8fb02409a19ceb54fee3f0f7f73eeed9e0ad63fa778eac7b3e4633d7d682

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "73A068F907CC50DD60AF18D545B4264DD44BC4B9F40BF9ADFCEEA157FDC33099" 

                                        
                                            
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12886 

                                        
                                            
Expires: Fri, 04 Nov 2022 08:02:50 GMT 

                                        
                                            
Date: Fri, 04 Nov 2022 04:28:04 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    9f3527f898221f8ba6b5015f6decc100

                                                Sha1:   ead93baa0e9d3a6297be3377dc3a624e5a3f509a

                                                Sha256: 73a068f907cc50dd60af18d545b4264dd44bc4b9f40bf9adfceea157fdc33099

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: jtJ17vaCCNkec7gXLPPgCa0NgdQi1NeBnc9hFX3UKxZWnX9QGoU0uHeLbDNPJadV1VvWYU0LbW52vKcP6FDf8g== 

                                        
                                            
x-amz-request-id: 8BCDH0G2RN9VVZCP 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Fri, 04 Nov 2022 04:09:27 GMT 

                                        
                                            
age: 1117 

                                        
                                            
last-modified: Fri, 30 Sep 2022 18:50:55 GMT 

                                        
                                            
etag: "67d5a988edcda47bc3b3b3f65d32b4b6" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    67d5a988edcda47bc3b3b3f65d32b4b6

                                                Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f

                                                Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sectigo.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         104.18.32.68

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Fri, 04 Nov 2022 04:28:04 GMT 

                                        
                                            
Content-Length: 472 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Thu, 03 Nov 2022 00:50:49 GMT 

                                        
                                            
Expires: Thu, 10 Nov 2022 00:50:48 GMT 

                                        
                                            
Etag: "0012c747264a382264d4b9405e5dde88f554a358" 

                                        
                                            
Cache-Control: max-age=504763,s-maxage=1800,public,no-transform,must-revalidate 

                                        
                                            
X-CCACDN-Proxy-ID: mcdpinlb6 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
CF-Cache-Status: DYNAMIC 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 764a99d0bc4a0b69-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    699674aaa5fba23f942c3bdeb5b5c499

                                                Sha1:   0012c747264a382264d4b9405e5dde88f554a358

                                                Sha256: bb428f66b6404ec3a7ed5f717f3b1869c228331803eaa4e1f0a3b1845f7d77e3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 933 

                                        
                                            
Cache-Control: max-age=100457 

                                        
                                            
Date: Fri, 04 Nov 2022 04:28:04 GMT 

                                        
                                            
Etag: "63637698-1d7" 

                                        
                                            
Expires: Sat, 05 Nov 2022 08:22:21 GMT 

                                        
                                            
Last-Modified: Thu, 03 Nov 2022 08:06:48 GMT 

                                        
                                            
Server: ECS (ska/F70A) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    670d0b2f341e8ff1e4ee9fe4fe21e210

                                                Sha1:   dcd277daebf63623b985a81a96bcdc6a6f67c518

                                                Sha256: 75029ab8db44811ac539aa3e2f1f8e015a45b80cb5a1099cec7d64e55e2a72a6

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22" 

                                        
                                            
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8898 

                                        
                                            
Expires: Fri, 04 Nov 2022 06:56:24 GMT 

                                        
                                            
Date: Fri, 04 Nov 2022 04:28:06 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    f6ae0db60213bfddbf2ad71a9fb116bf

                                                Sha1:   915d2895adc3f022c28cc628aeb6e441cbb09d47

                                                Sha256: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22" 

                                        
                                            
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8898 

                                        
                                            
Expires: Fri, 04 Nov 2022 06:56:24 GMT 

                                        
                                            
Date: Fri, 04 Nov 2022 04:28:06 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    f6ae0db60213bfddbf2ad71a9fb116bf

                                                Sha1:   915d2895adc3f022c28cc628aeb6e441cbb09d47

                                                Sha256: ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e8d44f8-0c00-4a8a-be62-f3074a628773.webp HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 3129 

                                        
                                            
x-amzn-requestid: d2f79c4c-1685-495e-add4-66db55669be5 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bC1EeF2YoAMFzwA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6364354f-6957babc65b33a56575d4deb;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 03 Nov 2022 21:40:31 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: NoRwUtjf1DSIEZ8lMSJg8UT7lUyeew3B1Fwa44BrN3Av6H4TXsdTVw== 

                                        
                                            
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 03 Nov 2022 21:51:52 GMT 

                                        
                                            
age: 23774 

                                        
                                            
etag: "4b6eeba25ea9eb878f06c9fdd158baa08095816a" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   3129

                                                Md5:    c51fb56e3d2ff1c96ac94fa6dc04d7ff

                                                Sha1:   4b6eeba25ea9eb878f06c9fdd158baa08095816a

                                                Sha256: 5007b706cd8c32431ba8d023f2c85eb3d5faa29a89e52530f66a11fa6d56a487

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F877911e5-70a1-471d-b418-3ee8665daf00.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8016 

                                        
                                            
x-amzn-requestid: 971369d4-3728-4fef-9d82-794fd184d26d 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: bC0S3FbeIAMFceg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63643412-0efd014e4b25ed9c4aed13cb;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 03 Nov 2022 21:35:14 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: ZPGScUHAZtgr_egNkJ2bOzK_ftHSd0Yr1U_S7jYUelg56FCtTOC2TA== 

                                        
                                            
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 03 Nov 2022 21:53:05 GMT 

                                        
                                            
age: 23701 

                                        
                                            
etag: "0d3c7535f83ced168b1efb0f849e353de31d40db" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8016

                                                Md5:    f787d03ccf6f14f05b9fb00149a92f49

                                                Sha1:   0d3c7535f83ced168b1efb0f849e353de31d40db

                                                Sha256: bda8d5d8dee8c1b3b9a0dd81407bc920a3a2a737dceaaebf75e8554ef1cdcec8

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F43a2ca39-70e2-4cc7-b378-65317cca7969.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9023 

                                        
                                            
x-amzn-requestid: 599a15c5-bd47-4c30-91e5-b445da7e66f9 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: apwvQHCsIAMFWlg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-635a2e61-1d36740311e6b1e531d44767;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 27 Oct 2022 07:08:17 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: FdYEabB0P-JcMOvjTK2TdVUCbuCbCEICZXoKHcz2-QdUfpIgey1tWw== 

                                        
                                            
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 03 Nov 2022 23:04:31 GMT 

                                        
                                            
age: 19415 

                                        
                                            
etag: "09b052e39f5493c2c2b79d92e81e510aeffbfcb4" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9023

                                                Md5:    55f392ea73e9746f7edb30e319646c4b

                                                Sha1:   09b052e39f5493c2c2b79d92e81e510aeffbfcb4

                                                Sha256: 9a5b1575ed3a943be74e212f41f122178dcf4c89ef0d78eb8cc761508cd453d9

URL	vaishnodevihelicopteronline.com/
IP	66.29.137.40 (United States)
ASN	#22612 NAMECHEAP-NET
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-04 04:28:15 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	25
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (8)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 66.29.137.40

Last 5 reports on ASN: NAMECHEAP-NET

Last 5 reports on domain: vaishnodevihelicopteronline.com

Last 1 reports with similar screenshot

JavaScript

Executed Scripts (3)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (28)

Overview

Domain Summary (8)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 66.29.137.40

Last 5 reports on ASN: NAMECHEAP-NET

Last 5 reports on domain: vaishnodevihelicopteronline.com

Last 1 reports with similar screenshot

JavaScript

Executed Scripts (3)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (28)

Network Intrusion Detection Systems