| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha39c6b0123e56e5b89743a8ad25c746e feb61559594a73b319532dec130f10068fdf1242 d1adf9c8c7e63c33674a6af4b4111fe0ce1092d362ca4bf7c7dd00e6b6034f09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1ADF9C8C7E63C33674A6AF4B4111FE0CE1092D362CA4BF7C7DD00E6B6034F09"
Last-Modified: Thu, 02 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17573
Expires: Fri, 03 Mar 2023 11:11:38 GMT
Date: Fri, 03 Mar 2023 06:18:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashcf3bd7bf954753a40867593f59828a19 8812b6b5e4e0725e3a5a7700be3ef0b4c3db4e24 d74374d27bbe6df8c6d8f7da2e5db0e0b07efb07a711131b500bc66a12594b88
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D74374D27BBE6DF8C6D8F7DA2E5DB0E0B07EFB07A711131B500BC66A12594B88"
Last-Modified: Thu, 02 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7248
Expires: Fri, 03 Mar 2023 08:19:33 GMT
Date: Fri, 03 Mar 2023 06:18:45 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash84db75194692d4afe13196bda6f22da8 4c1f49bc973a4917f146d93c8d598344edc021f6 a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Mar 2023 06:08:16 GMT
content-type: application/json
age: 629
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd2383d0b67af7368d8e13a3013f4065a cdf951e84f87d010cf40b76f7b91e82ad17f374f 5463c186f7f30f83be61e91a980c749b70089e48b234d73a6e7eeb179cfd7ee9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5463C186F7F30F83BE61E91A980C749B70089E48B234D73A6E7EEB179CFD7EE9"
Last-Modified: Thu, 02 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7024
Expires: Fri, 03 Mar 2023 08:15:49 GMT
Date: Fri, 03 Mar 2023 06:18:45 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashb5ba6334e73496995e3e3a9ecd0eb323 ad80d3b7718c28364e8c2004fb38a13a1747e462 aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Hhnq3lG9NZat3peDYEoUmTE8ogZuVasYj4ZD1niQ8n3xclA1WD+gPnS0n08XCjeQasGn3Mq6T0w=
x-amz-request-id: ZDAMVSWTH1R33JYX
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Mar 2023 06:15:43 GMT
age: 182
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Mar 2023 06:18:45 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Cache-Control, Expires, Alert, Content-Type, Pragma, Retry-After, Last-Modified, Backoff, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Mar 2023 06:03:38 GMT
age: 908
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash51e95d61b93964116033d39ca29d8e87 f4b94d787ce49da21c28fe7853b1a85d2b9494dc 083c886afce548aad4f54caa7f7766e38d9376d55077d4072dbddbdafa086f85
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "083C886AFCE548AAD4F54CAA7F7766E38D9376D55077D4072DBDDBDAFA086F85"
Last-Modified: Thu, 02 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17775
Expires: Fri, 03 Mar 2023 11:15:01 GMT
Date: Fri, 03 Mar 2023 06:18:46 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 35.163.49.154 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.163.49.154:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6gLrAaqGnyaEu3FbUbnoUQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: z7fdmqJaRzI4xbkPDy7nzeW1034=
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0880782ffbede81650c9d4a97c298bdf 0e35c0d6cba0bef0b9eeb039ebc9104b39b24e2e 77e1a8623eeadfa78646a661f4541b47b8f0a4ac6ad73825ce3a43fc57c21cd1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "77E1A8623EEADFA78646A661F4541B47B8F0A4AC6AD73825CE3A43FC57C21CD1"
Last-Modified: Thu, 02 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5474
Expires: Fri, 03 Mar 2023 07:50:01 GMT
Date: Fri, 03 Mar 2023 06:18:47 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0880782ffbede81650c9d4a97c298bdf 0e35c0d6cba0bef0b9eeb039ebc9104b39b24e2e 77e1a8623eeadfa78646a661f4541b47b8f0a4ac6ad73825ce3a43fc57c21cd1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "77E1A8623EEADFA78646A661F4541B47B8F0A4AC6AD73825CE3A43FC57C21CD1"
Last-Modified: Thu, 02 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5474
Expires: Fri, 03 Mar 2023 07:50:01 GMT
Date: Fri, 03 Mar 2023 06:18:47 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0880782ffbede81650c9d4a97c298bdf 0e35c0d6cba0bef0b9eeb039ebc9104b39b24e2e 77e1a8623eeadfa78646a661f4541b47b8f0a4ac6ad73825ce3a43fc57c21cd1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "77E1A8623EEADFA78646A661F4541B47B8F0A4AC6AD73825CE3A43FC57C21CD1"
Last-Modified: Thu, 02 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5474
Expires: Fri, 03 Mar 2023 07:50:01 GMT
Date: Fri, 03 Mar 2023 06:18:47 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash0880782ffbede81650c9d4a97c298bdf 0e35c0d6cba0bef0b9eeb039ebc9104b39b24e2e 77e1a8623eeadfa78646a661f4541b47b8f0a4ac6ad73825ce3a43fc57c21cd1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "77E1A8623EEADFA78646A661F4541B47B8F0A4AC6AD73825CE3A43FC57C21CD1"
Last-Modified: Thu, 02 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5474
Expires: Fri, 03 Mar 2023 07:50:01 GMT
Date: Fri, 03 Mar 2023 06:18:47 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af64136-a861-4310-a53a-46118e015958.webp | 34.120.237.76 | 200 OK | 5.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af64136-a861-4310-a53a-46118e015958.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashcedce8eda0026b968341dff82479f997 8a52f23fa375a09d1b3a7de932f869a38581d5c2 8522668637c9f01facb1f1dc4b1fe5e96539fa72d5a776988825c2e06966ca7e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af64136-a861-4310-a53a-46118e015958.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5076
x-amzn-requestid: e34d4023-a209-46c5-803f-a63c52a6491a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BLYxtGb7IAMFiDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64013b3d-57ce3ced79c831fa0cfc2610;Sampled=0
x-amzn-remapped-date: Fri, 03 Mar 2023 00:11:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: fM1dtjWg9PlpwxE9uWZMV3HxwLKS9o_-Jb2CPfcgherikMBY0x-Xlw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 da4fa914888b330b3e8a08632b8e41be.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Mar 2023 00:35:02 GMT
etag: "8a52f23fa375a09d1b3a7de932f869a38581d5c2"
content-type: image/jpeg
age: 20625
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e6f0b8-087e-4402-ac06-5b51219dfc0e.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e6f0b8-087e-4402-ac06-5b51219dfc0e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6439d040b63a678d27ea7b6e54031357 a87aee8ddb2a65f45cba38b1d0f224a8bb818349 51e626f48ee444b6497a966403ba667fd69436b8856ab0777f0474aa50e2bedc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37e6f0b8-087e-4402-ac06-5b51219dfc0e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12822
x-amzn-requestid: bc1040e6-88bf-411b-8e77-f0cf49de9333
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BIfvAGiDIAMFVgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6400132c-7c771b520234abb12ac3fffc;Sampled=0
x-amzn-remapped-date: Thu, 02 Mar 2023 03:08:28 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: ocX6wdTQcBgTe2TqV8M-W7MMOkaEnyt3t8u55jeShNAH5aqiylmmyQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 0ec9ddba08fcd99386924593dbdbd44a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Mar 2023 04:12:50 GMT
age: 7557
etag: "a87aee8ddb2a65f45cba38b1d0f224a8bb818349"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f6f3861-1cba-4876-9965-416ce9b5f1b2.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f6f3861-1cba-4876-9965-416ce9b5f1b2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2559601e1d98b0e4e1edc23cf671f81c bd0c17095eecab7f7cac12a4051af6a916c6b523 9760d5dbadea790e80aea5231bcf1f215830f14a12330821eb8546d1ce6577ae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f6f3861-1cba-4876-9965-416ce9b5f1b2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8584
x-amzn-requestid: c19e32d7-e4f3-4df7-938e-c0c39254169d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BIfbWF5QoAMFXYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640012ae-49fb7dc67d349c5075b6084d;Sampled=0
x-amzn-remapped-date: Thu, 02 Mar 2023 03:06:22 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: ftM5QyxLyyS9fXuWidN-jqCda6RxMg_pwUNA0ZuqWF10Q8LO5TFp9Q==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 58b8655e3ea662bad02cac6b9d4c88ba.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Mar 2023 04:18:08 GMT
age: 7239
etag: "bd0c17095eecab7f7cac12a4051af6a916c6b523"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2987be1-6a23-4141-b91f-4c5c8b47c2e7.jpeg | 34.120.237.76 | 200 OK | 7.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2987be1-6a23-4141-b91f-4c5c8b47c2e7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7a3e2acce7fafd5a5685e9c6f990ea5f c6ed11520ae55c9a754099888a0d62c4701379e5 aeb3124b7df26f99fd291c64a68f5f61b93abfd016dd32f8b3040e6c493f0bc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2987be1-6a23-4141-b91f-4c5c8b47c2e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7082
x-amzn-requestid: b2177d20-d53d-4df3-beba-91802bcc8e24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BLCgfGZMIAMF_GQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6401179c-5ecf5d1d3fb2660054fe7956;Sampled=0
x-amzn-remapped-date: Thu, 02 Mar 2023 21:39:40 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Hit from cloudfront
x-amz-cf-id: WVB6xH2WxnEUHpHzbRrQiTaMduAj3WaekZg8VhIw8B77yfCGQJPbNA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 35342fd3ad9f4f9b82da032ca3afc472.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Mar 2023 21:54:35 GMT
age: 30252
etag: "c6ed11520ae55c9a754099888a0d62c4701379e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dc93829-4f5e-47fc-82e7-abc095364d12.jpeg | 34.120.237.76 | 200 OK | 5.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dc93829-4f5e-47fc-82e7-abc095364d12.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash780855222ea785d3000e1b40b74a487a 7a3a48fbe78936df3795ae3181534e7a6652c956 427e23d44cddf206d393500e1b2500fa9ef829c078dd953e28e9be8bf0d6a8d2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dc93829-4f5e-47fc-82e7-abc095364d12.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5104
x-amzn-requestid: 816fb8a0-1a9c-4572-bc8b-614693204c13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BLC66FkjIAMFcZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64011845-4bf667bb15439fbf648be139;Sampled=0
x-amzn-remapped-date: Thu, 02 Mar 2023 21:42:29 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Hit from cloudfront
x-amz-cf-id: XILlhVtMYJJqMYs81udZMl6V6gLyay_XONAWJTrRcnYEC1Itv7FDXg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 9c335c5f85533b11cbfd38dc7cc60c16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Mar 2023 21:55:41 GMT
age: 30187
etag: "7a3a48fbe78936df3795ae3181534e7a6652c956"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdba647c7-b8d3-4043-b8c8-caba179b5589.jpeg | 34.120.237.76 | 200 OK | 4.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdba647c7-b8d3-4043-b8c8-caba179b5589.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe6c6971746047136e4cbf0dd381a2bf1 07cb3900b31e286c0ee6ef4e6344969a5ad893b4 4f35efad14bd441063c58fff5a44e05a9497c91266ff5b4c48a9386288bbc886
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdba647c7-b8d3-4043-b8c8-caba179b5589.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4371
x-amzn-requestid: 4996a003-e275-4edb-a0a3-f5d7e72cd1ce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BLChFE_NoAMFYPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640117a0-31d3ea3b1e196aaa372dd016;Sampled=0
x-amzn-remapped-date: Thu, 02 Mar 2023 21:39:44 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 6TMBH_aSock0V22r3Xt99HQs1N7qY65SsSyiYPrtXYAPW-l3d3lC7g==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 3aed32068dbe2f7fb3a27284c9c26498.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Mar 2023 21:54:35 GMT
age: 30253
etag: "07cb3900b31e286c0ee6ef4e6344969a5ad893b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js | 104.17.24.14 | 200 OK | 11 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/imask/3.4.0/imask.min.js IP104.17.24.14:0
File typeASCII text, with very long lines (45552) Hash6dd93e13c5bb3b67dadd0de250ffea2f 961bf5bb7cc4aa32bcd66b9ac34461f7e02d96d3 1238c95de9a6c90c1992853fd140b31d2ec8854a09deaa0d4a2d3136281af5e9
GET /ajax/libs/imask/3.4.0/imask.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Mar 2023 06:18:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 10899
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e9f-b217"
last-modified: Mon, 04 May 2020 16:11:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3669530
expires: Wed, 21 Feb 2024 06:18:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XRPNMd0SOaeVBTh6hzj5D2kmhPnFN04O5VzH2P0ZOPgLmwOJmeWboapZ%2FqA%2Fv6a8PZ7sYSB3RDlNz7llKCGlpcTtU2DtG%2BJ6N7xXahvSJn8d7U9TKDCeHqxz3VLgrNALXLjrg7iT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7a1fc3abacc8b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| secure02-capital1verification-ecm.com/gc/account/kb/css/style.css | 74.208.236.173 | 200 OK | 4.2 kB |
URL HTTP/2secure02-capital1verification-ecm.com/gc/account/kb/css/style.css IP74.208.236.173:0
Hash4572542ac353167e7fcd4b37c42cc452 c3072ef8fddc1f11e80afe2de5c72867628d42a7 724701ba0869c2848b479b01f166f66c868e5e6b4405b3fe9ab147c16a6068e9
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Capital One |
GET /gc/account/kb/css/style.css HTTP/1.1
Host: secure02-capital1verification-ecm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 4248
date: Fri, 03 Mar 2023 06:18:49 GMT
server: Apache
last-modified: Sat, 10 Dec 2022 05:45:40 GMT
etag: "1098-5ef72c7be4900"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| secure02-capital1verification-ecm.com/gc/account/kb/files/styles.475f87ef7e34e703d941.css | 74.208.236.173 | 200 OK | 116 kB |
URL HTTP/2secure02-capital1verification-ecm.com/gc/account/kb/files/styles.475f87ef7e34e703d941.css IP74.208.236.173:0
File typeASCII text, with very long lines (65536), with no line terminators Size116 kB (116197 bytes) Hash6268f898e79f113dced13dcebe38b10f 7ecc82d74dda1ef9ad06700d4edcbafbc6de261a c1470f7e138a7522526d75fdb5b1597f9adafb7bdbec38b11b89c46e931f450c
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Capital One |
GET /gc/account/kb/files/styles.475f87ef7e34e703d941.css HTTP/1.1
Host: secure02-capital1verification-ecm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 116197
date: Fri, 03 Mar 2023 06:18:49 GMT
server: Apache
last-modified: Sat, 10 Dec 2022 05:21:36 GMT
etag: "1c5e5-5ef7271ac9800"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| secure02-capital1verification-ecm.com/gc/account/kb/files/browserFingerPrintv1.min.js.download | 74.208.236.173 | 200 OK | 28 kB |
URL HTTP/2secure02-capital1verification-ecm.com/gc/account/kb/files/browserFingerPrintv1.min.js.download IP74.208.236.173:0
File typeASCII text, with very long lines (28442), with no line terminators Hash0f537e63c621f88c0c4bf4257394b2c2 7f28eaf9bbf93c3a2d4e012aaca4f34c3cbc3c97 559d96c9ff8af5055471707c21b22ac1a7bca706d199dc9f5659a65c02d7e944
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Capital One | fortinet | Phishing | |
GET /gc/account/kb/files/browserFingerPrintv1.min.js.download HTTP/1.1
Host: secure02-capital1verification-ecm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 28442
date: Fri, 03 Mar 2023 06:18:49 GMT
server: Apache
last-modified: Sat, 10 Dec 2022 05:21:36 GMT
etag: "6f1a-5ef7271ac9800"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| secure02-capital1verification-ecm.com/gc/account/kb/files/examine.svg | 74.208.236.173 | 200 OK | 2.1 kB |
URL HTTP/2secure02-capital1verification-ecm.com/gc/account/kb/files/examine.svg IP74.208.236.173:0
File typeSVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2092), with no line terminators Hash5791de769b621b54ec564801ab823f10 f9cb957eb9d2ef18c32c71af001e2e7bb0380f5d a9e240fa54e4bd317fb06ce0920687e1f1a577d70c9593db633891126e8fbd29
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Capital One | fortinet | Phishing | |
GET /gc/account/kb/files/examine.svg HTTP/1.1
Host: secure02-capital1verification-ecm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 2092
date: Fri, 03 Mar 2023 06:18:49 GMT
server: Apache
last-modified: Sat, 10 Dec 2022 05:21:38 GMT
etag: "82c-5ef7271cb1c80"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| secure02-capital1verification-ecm.com/gc/account/kb/files/fdic.svg | 74.208.236.173 | 200 OK | 2.1 kB |
URL HTTP/2secure02-capital1verification-ecm.com/gc/account/kb/files/fdic.svg IP74.208.236.173:0
File typeSVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (2063), with no line terminators Hash508681d436b6b42ca2fe4f037d575129 78a4d0e58d49cfce4ed992dcd7265548c1fa7814 628de643d113e225cf4347ed2571ee813cb0919a3895d1902ee18e6f63d539f1
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Capital One | fortinet | Phishing | |
GET /gc/account/kb/files/fdic.svg HTTP/1.1
Host: secure02-capital1verification-ecm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 2063
date: Fri, 03 Mar 2023 06:18:49 GMT
server: Apache
last-modified: Sat, 10 Dec 2022 05:21:38 GMT
etag: "80f-5ef7271cb1c80"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| secure02-capital1verification-ecm.com/gc/account/kb/files/capital-one-logo.svg | 74.208.236.173 | 200 OK | 4.0 kB |
URL HTTP/2secure02-capital1verification-ecm.com/gc/account/kb/files/capital-one-logo.svg IP74.208.236.173:0
File typeASCII text, with very long lines (3967), with CRLF line terminators Hashf0b7ad81821effc52540e39cafda48f9 33d64bc7001f414f12bd92e740a45e5ced239add 57dfca5b95599a613da940f4a49ab6378fcf0586366a47cae679796930bf0eed
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Capital One | fortinet | Phishing | |
GET /gc/account/kb/files/capital-one-logo.svg HTTP/1.1
Host: secure02-capital1verification-ecm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3971
date: Fri, 03 Mar 2023 06:18:49 GMT
server: Apache
last-modified: Sat, 10 Dec 2022 05:21:36 GMT
etag: "f83-5ef7271ac9800"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1= | 74.208.236.173 | 200 OK | 27 kB |
URL HTTP/2secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1= IP74.208.236.173:0
Hash605960140f44c96e425b59c6cf0dec2e 1fb8c30f9361b3c2fea8850245f126d255c06090 e2383a87537fa7cc255d4c22b4b98653a0a34d93a7ccf9787b632c29a22d7f9e
GET /gc/account/kb/?https://localhost:4080/d?hck=1= HTTP/1.1
Host: secure02-capital1verification-ecm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Fri, 03 Mar 2023 06:18:46 GMT
server: Apache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| secure02-capital1verification-ecm.com/gc/account/kb/js/script.js | 74.208.236.173 | 200 OK | 99 kB |
URL HTTP/2secure02-capital1verification-ecm.com/gc/account/kb/js/script.js IP74.208.236.173:0
File typeASCII text, with very long lines (18129) Hash1501b528220baca92f7d189b7f00136b 60b48644dc907af63a10411190e9e085857a7078 9b11ce0ce39ad24aa3c869cbde323c1605bbafdfd45ab8f013aa48731d5a4969
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Capital One | fortinet | Phishing | |
GET /gc/account/kb/js/script.js HTTP/1.1
Host: secure02-capital1verification-ecm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 99372
date: Fri, 03 Mar 2023 06:18:49 GMT
server: Apache
last-modified: Mon, 28 Dec 2020 21:00:36 GMT
etag: "1842c-5b78c90c9c500"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 192.229.221.95 | 200 OK | 471 B |
IP192.229.221.95:0
Hashfeda09fcd6435ed31f54926d845aa409 dcb1c5713a40d5edf6b023636634db1dd94b6e52 a8fcdbd5f73e85eac94575c637088c160d8570ad50ab2ec6a957c564f5a4d1af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1562
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Mar 2023 06:18:50 GMT
Last-Modified: Fri, 03 Mar 2023 05:52:48 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 192.229.221.95 | 200 OK | 471 B |
IP192.229.221.95:0
Hashfeda09fcd6435ed31f54926d845aa409 dcb1c5713a40d5edf6b023636634db1dd94b6e52 a8fcdbd5f73e85eac94575c637088c160d8570ad50ab2ec6a957c564f5a4d1af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1554
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Mar 2023 06:18:50 GMT
Last-Modified: Fri, 03 Mar 2023 05:52:57 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 192.229.221.95 | 200 OK | 471 B |
IP192.229.221.95:0
Hashfeda09fcd6435ed31f54926d845aa409 dcb1c5713a40d5edf6b023636634db1dd94b6e52 a8fcdbd5f73e85eac94575c637088c160d8570ad50ab2ec6a957c564f5a4d1af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1553
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 03 Mar 2023 06:18:50 GMT
Last-Modified: Fri, 03 Mar 2023 05:52:57 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 471
|
|
| secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1= | 74.208.236.173 | 200 OK | 52 kB |
URL HTTP/2secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1= IP74.208.236.173:0
Hashb077aaba3e07ed388ad2101d583a72ee 7640d96708bde348d6a7a8c4f3fd6d78ec932949 bfde33afadf7cafede948c6cbac957796c228d50d20e9bd46453b913a64ea2b2
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Capital One |
GET /gc/account/kb/?https://localhost:4080/d?hck=1= HTTP/1.1
Host: secure02-capital1verification-ecm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Fri, 03 Mar 2023 06:18:49 GMT
server: Apache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_SBd.woff2 | 104.110.12.190 | 200 OK | 28 kB |
URL HTTP/2ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_SBd.woff2 IP104.110.12.190:0
File typeWeb Open Font Format (Version 2), TrueType, length 28188, version 1.0\012- data Hashd647937062406e5cc182de0cc77947d8 9d4c283a4fca43ae95019091bbd0a9e1b77b97bc 48b4ed4ba8ee0eaeddfba861e6772c61f818931816102636a888ec0b49bce056
GET /CI_Common/assets/fonts/Optimist_W_SBd.woff2 HTTP/1.1
Host: ecm.capitalone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure02-capital1verification-ecm.com
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 28188
last-modified: Fri, 28 Jun 2019 00:26:02 GMT
etag: "d647937062406e5cc182de0cc77947d8"
x-amz-server-side-encryption: AES256
x-amz-version-id: QmX7yv6RJT4hT4UTSJmqyU0reaonF3KP
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: SxgW2j2Ku0ctcy9uifxoUSuEGDe6rOxpREUwMoFk23y-XvIAp5y9VA==
x-datastream-cache-status: 1
cache-control: max-age=1168640
expires: Thu, 16 Mar 2023 18:56:10 GMT
date: Fri, 03 Mar 2023 06:18:50 GMT
access-control-request-method: POST,GET,PUT,DELETE
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_Lt.woff2 | 104.110.12.190 | 200 OK | 28 kB |
URL HTTP/2ecm.capitalone.com/CI_Common/assets/fonts/Optimist_W_Lt.woff2 IP104.110.12.190:0
File typeWeb Open Font Format (Version 2), TrueType, length 27852, version 1.0\012- data Hashcb37fa55f3dfdd26d61901032a53644f 1115e8d43a08c1f74ec1f6a886d1cb530bb9da97 902c5a9d8ad932630fb2021fe1a1a7f4f06513b19e8d073866178ee65ff33fe9
GET /CI_Common/assets/fonts/Optimist_W_Lt.woff2 HTTP/1.1
Host: ecm.capitalone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure02-capital1verification-ecm.com
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 27852
last-modified: Fri, 28 Jun 2019 00:26:02 GMT
etag: "cb37fa55f3dfdd26d61901032a53644f"
x-amz-server-side-encryption: AES256
x-amz-version-id: Q75rYxmglrbgkwTTGgaHL71RQB9n5YCD
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: LHR62-C4
x-amz-cf-id: WZLHu-KyMHr9Oi38M7o8z4XXwUqHnVG-f6Rg-E6l9knxWl69APaosA==
x-datastream-cache-status: 1
cache-control: max-age=288063
expires: Mon, 06 Mar 2023 14:19:53 GMT
date: Fri, 03 Mar 2023 06:18:50 GMT
access-control-request-method: POST,GET,PUT,DELETE
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| secure02-capital1verification-ecm.com/gc/account/kb/img/favicon.ico | 74.208.236.173 | 200 OK | 15 kB |
URL HTTP/2secure02-capital1verification-ecm.com/gc/account/kb/img/favicon.ico IP74.208.236.173:0
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data Hashd27e1739c7477b10ec6917546ae61f1d bb36ab8bce726ce72a2d74a8529526bca0fa515d 5f2123af80970c0478de7f373c9d861d886e070592ebcd55fa372d8dfc9752ec
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Capital One |
GET /gc/account/kb/img/favicon.ico HTTP/1.1
Host: secure02-capital1verification-ecm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure02-capital1verification-ecm.com/gc/account/kb/?https://localhost:4080/d?hck=1=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
content-length: 15086
date: Fri, 03 Mar 2023 06:18:50 GMT
server: Apache
last-modified: Sat, 10 Dec 2022 06:58:58 GMT
etag: "3aee-5ef73cde27080"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|