r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 93f633ce30c038eb581544323c5a971e
2f60526cb750c6babccc207f75fb5a8ae6f7598b
0ff6df80a892199848fb943af78541b66efc09a7ab70d4b169906fdbac1eabf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FF6DF80A892199848FB943AF78541B66EFC09A7AB70D4B169906FDBAC1EABF8"
Last-Modified: Mon, 27 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6019
Expires: Tue, 28 Mar 2023 20:00:39 GMT
Date: Tue, 28 Mar 2023 18:20:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c83d39f350161ed2f5d20dcd68e47c92
2695a888e652cb314f8094cc6073c3364336d272
62e5cc6aea61c3c32acd964d4bbe143806416008181eebc4451a8f035b69a0bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62E5CC6AEA61C3C32ACD964D4BBE143806416008181EEBC4451A8F035B69A0BC"
Last-Modified: Mon, 27 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6049
Expires: Tue, 28 Mar 2023 20:01:09 GMT
Date: Tue, 28 Mar 2023 18:20:20 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 28 Mar 2023 17:28:05 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3135
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ad3eec59bebbf969f175627757507c1
b176af3a70db378c9e1f219bab24d9d446070d6f
704fa284035b4c9aa487331b516f5f11c324e204756ae2503bad2606ed34f25e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "704FA284035B4C9AA487331B516F5F11C324E204756AE2503BAD2606ED34F25E"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17985
Expires: Tue, 28 Mar 2023 23:20:05 GMT
Date: Tue, 28 Mar 2023 18:20:20 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: DkPiuhhqE0fTRNPrDYXQojactIsFnMYa8ssURn9bYO8FH15X/+5MUCM4GIyznPxhd8bnZq2prQ8=
x-amz-request-id: FGN2SNCHTMAKS9KF
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 28 Mar 2023 18:02:09 GMT
age: 1091
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 28 Mar 2023 18:20:20 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a740252e7b24892a3e34f6dfed6e3bde
d44d21abb95edd1ccc775632254f11ee94fb585e
e289995a2b4b340364dd7dfa32c79c7722ece6cc4b893b38fc68bbce680d2f94
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E289995A2B4B340364DD7DFA32C79C7722ECE6CC4B893B38FC68BBCE680D2F94"
Last-Modified: Mon, 27 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18203
Expires: Tue, 28 Mar 2023 23:23:44 GMT
Date: Tue, 28 Mar 2023 18:20:21 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Cache-Control, Retry-After, Content-Type, Last-Modified, ETag, Pragma, Content-Length, Expires, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 28 Mar 2023 18:17:26 GMT
cache-control: public,max-age=3600
age: 175
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: byL9OWEPaABF72tbPKv8cQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 317+iBSq0pveBJkBVnPozJh5s8I=
Date: Tue, 28 Mar 2023 18:20:21 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.acknowledgement.shiftingimpressions.com/bb/ZmRmUyBjWFJkZF5SXzFfYVJUYFJlWl9YZB9UYF4gIiYjISQgJiMmJigiHiMhJiEoJx4iIScqKiEeJyMiIyoeIR4hIFVaZFRgZ1ZjH2BTZFZjZ1JTXVZWV1dWVGUfVGBeICA7YFlfX2ofN2ZjYzFVWmRUYGdWYx9gU2RWY2dSU11WVldXVlRlH1RgXiAhIEZDPSIpU1QnJCglVFMmIyoiJlJUIipVUiUmVVNVViMiVVUkKA==
302 Found 439 B URL HTTP/1.1 www.acknowledgement.shiftingimpressions.com/bb/ZmRmUyBjWFJkZF5SXzFfYVJUYFJlWl9YZB9UYF4gIiYjISQgJiMmJigiHiMhJiEoJx4iIScqKiEeJyMiIyoeIR4hIFVaZFRgZ1ZjH2BTZFZjZ1JTXVZWV1dWVGUfVGBeICA7YFlfX2ofN2ZjYzFVWmRUYGdWYx9gU2RWY2dSU11WVldXVlRlH1RgXiAhIEZDPSIpU1QnJCglVFMmIyoiJlJUIipVUiUmVVNVViMiVVUkKA==
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (367), with CRLF line terminators
Hash 4d08f53d2cc0f68f2cf010881389c33e
f9fda691c6849a7caacaeffd6ef478bfa3a47881
e72abf71ea80eef8a56be9ed1838a49410417edf2810f6b6ce243ad761a15c1e
Analyzer Verdict Alert fortinet Phishing
GET /bb/ZmRmUyBjWFJkZF5SXzFfYVJUYFJlWl9YZB9UYF4gIiYjISQgJiMmJigiHiMhJiEoJx4iIScqKiEeJyMiIyoeIR4hIFVaZFRgZ1ZjH2BTZFZjZ1JTXVZWV1dWVGUfVGBeICA7YFlfX2ofN2ZjYzFVWmRUYGdWYx9gU2RWY2dSU11WVldXVlRlH1RgXiAhIEZDPSIpU1QnJCglVFMmIyoiJlJUIipVUiUmVVNVViMiVVUkKA== HTTP/1.1
Host: www.acknowledgement.shiftingimpressions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 28 Mar 2023 18:20:21 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: http://discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 439
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
200 OK 6.3 kB URL HTTP/1.1 discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (2572), with CRLF line terminators
Hash f00ef2f34901a9aedbe18b380de4c7af
614ea5990b87c115309547348e87b372abeeadc6
90a525822d459bbbb3f4ed66f0b761b6278a980639ca8175b323083967a66667
GET /unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM HTTP/1.1
Host: discover.observableeffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 18:20:21 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 6255
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
discover.observableeffect.com/tracking/WebResource.axd?d=srdq82Jjjh_8FWHcy5YDw5iWFBYgqBt2N54JoZHnhEeezBSt6MlHy3uJX0u-goc_2dchg2mtWfhDPnniIqFMI_zow5pSKOdkYP8474PyWFM1&t=636403334294818574
200 OK 6.0 kB URL HTTP/1.1 discover.observableeffect.com/tracking/WebResource.axd?d=srdq82Jjjh_8FWHcy5YDw5iWFBYgqBt2N54JoZHnhEeezBSt6MlHy3uJX0u-goc_2dchg2mtWfhDPnniIqFMI_zow5pSKOdkYP8474PyWFM1&t=636403334294818574
IP
File type ASCII text, with CRLF line terminators
Hash 06fd446079195e9866f38728a31b8416
bce7935598a51703a7077dd75e1d30882533c6e1
5466d19b6349cc09de47de356c3195b2fd367a5ab8f1c55e8aaf2f296915d46d
GET /tracking/WebResource.axd?d=srdq82Jjjh_8FWHcy5YDw5iWFBYgqBt2N54JoZHnhEeezBSt6MlHy3uJX0u-goc_2dchg2mtWfhDPnniIqFMI_zow5pSKOdkYP8474PyWFM1&t=636403334294818574 HTTP/1.1
Host: discover.observableeffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 18:20:21 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Tue, 26 Mar 2024 23:27:35 GMT
Last-Modified: Thu, 07 Sep 2017 02:23:49 GMT
Vary: Accept-Encoding
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 6007
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
discover.observableeffect.com/tracking/ScriptResource.axd?d=U43pgXBB0aZ29ooTcCBeZj6S94T5WgL7mWvqZpEAi3Q7W35n7NrnZeLBYXKBkIfeSXaQOHq2lIT5LLYg9-SM8vq0jdyuXRqLN2V_fWWkSXpwAylwZzQEcczk56z4kXKEbp4EwdZ1STP5YV-AnwlwCP-w3H5i8ZayEdHvM7Eh1BY1&t=29ce779a
200 OK 5.5 kB URL HTTP/1.1 discover.observableeffect.com/tracking/ScriptResource.axd?d=U43pgXBB0aZ29ooTcCBeZj6S94T5WgL7mWvqZpEAi3Q7W35n7NrnZeLBYXKBkIfeSXaQOHq2lIT5LLYg9-SM8vq0jdyuXRqLN2V_fWWkSXpwAylwZzQEcczk56z4kXKEbp4EwdZ1STP5YV-AnwlwCP-w3H5i8ZayEdHvM7Eh1BY1&t=29ce779a
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash cd81a5effc23af770be1c6ad035a5e4e
ec3cdf31293e2e43fb1f189decc18019cd3d2f23
0bbe6b1d897c994aa54d02d1692b8dd4d64a2f28d809f954ce6ba356c7d16abb
GET /tracking/ScriptResource.axd?d=U43pgXBB0aZ29ooTcCBeZj6S94T5WgL7mWvqZpEAi3Q7W35n7NrnZeLBYXKBkIfeSXaQOHq2lIT5LLYg9-SM8vq0jdyuXRqLN2V_fWWkSXpwAylwZzQEcczk56z4kXKEbp4EwdZ1STP5YV-AnwlwCP-w3H5i8ZayEdHvM7Eh1BY1&t=29ce779a HTTP/1.1
Host: discover.observableeffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 18:20:21 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Wed, 27 Mar 2024 18:19:28 GMT
Last-Modified: Tue, 28 Mar 2023 18:19:28 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 5479
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
discover.observableeffect.com/Telerik.Web.UI.WebResource.axd?type=rca&isc=true&guid=80a82010-d82b-4fa5-b1af-c5873fe2267f
200 OK 3.2 kB URL HTTP/1.1 discover.observableeffect.com/Telerik.Web.UI.WebResource.axd?type=rca&isc=true&guid=80a82010-d82b-4fa5-b1af-c5873fe2267f
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 182x50, components 3\012- data
Hash d5ad2111b40a551f5bd4634be4a347f5
10cc97893fc84217db09f9a748ab053521a5bda4
88baa16187e4382964a78b89cb17ca02f0b6eee6d6d16942723a3f787690f72c
GET /Telerik.Web.UI.WebResource.axd?type=rca&isc=true&guid=80a82010-d82b-4fa5-b1af-c5873fe2267f HTTP/1.1
Host: discover.observableeffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 18:20:21 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Content-Type: image/jpeg
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 3210
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
discover.observableeffect.com/tracking/ScriptResource.axd?d=YmOb4kdVR6l2C5E6g7hC7LxkqlUZI0HvsP5H5AuxkwWGu5ZM9wJF8yiAhfv89_R6xEIXTcHh5yT960a9IAoTB7-bdQ4tuk-aGiUOI9Vaa-FTs9Ncb32fQ6SqSidzm3f6viW49d5DzRuSQLmdUalLUw2&t=ffffffffd98c31ca
200 OK 2.1 kB URL HTTP/1.1 discover.observableeffect.com/tracking/ScriptResource.axd?d=YmOb4kdVR6l2C5E6g7hC7LxkqlUZI0HvsP5H5AuxkwWGu5ZM9wJF8yiAhfv89_R6xEIXTcHh5yT960a9IAoTB7-bdQ4tuk-aGiUOI9Vaa-FTs9Ncb32fQ6SqSidzm3f6viW49d5DzRuSQLmdUalLUw2&t=ffffffffd98c31ca
IP
File type Unicode text, UTF-8 (with BOM) text
Hash 22dbcda895f9546767c140fe93520697
3634118d89439253c8941a201fb6a8adfb366710
57f8c497dc5dd1aff6de4279ae15b6b49868c31c13a0b94559c067fabc26b2ba
GET /tracking/ScriptResource.axd?d=YmOb4kdVR6l2C5E6g7hC7LxkqlUZI0HvsP5H5AuxkwWGu5ZM9wJF8yiAhfv89_R6xEIXTcHh5yT960a9IAoTB7-bdQ4tuk-aGiUOI9Vaa-FTs9Ncb32fQ6SqSidzm3f6viW49d5DzRuSQLmdUalLUw2&t=ffffffffd98c31ca HTTP/1.1
Host: discover.observableeffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 18:20:21 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: text/javascript
Content-Encoding: gzip
Expires: Wed, 27 Mar 2024 17:35:33 GMT
Last-Modified: Tue, 28 Mar 2023 17:35:33 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 2075
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
discover.observableeffect.com/tracking/ScriptResource.axd?d=WSRj4_0c0C37wCAnU0EMCxNqPq2Nzt3PYht7oCg3qOdW12a7dtlnBgwsLM-8mvQYHqAJCHZ8slcvcS1FmQILeGrVjQBDQauU8wt1lYdDy9lDOU2aMHz10ZXgAHPaadcfRDEUyV7i9Kk0M-sjLdL-zA2&t=ffffffffd98c31ca
200 OK 15 kB URL HTTP/1.1 discover.observableeffect.com/tracking/ScriptResource.axd?d=WSRj4_0c0C37wCAnU0EMCxNqPq2Nzt3PYht7oCg3qOdW12a7dtlnBgwsLM-8mvQYHqAJCHZ8slcvcS1FmQILeGrVjQBDQauU8wt1lYdDy9lDOU2aMHz10ZXgAHPaadcfRDEUyV7i9Kk0M-sjLdL-zA2&t=ffffffffd98c31ca
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (457)
Hash 4d1a75edd8ebd4168de9438a33fa0cc6
5a1bf2205a644533bcc84a19742ac9ce586b4cc4
bc8e7ef308868bd252691f01385519fbbb000d9013d6717267a6aeb719212365
GET /tracking/ScriptResource.axd?d=WSRj4_0c0C37wCAnU0EMCxNqPq2Nzt3PYht7oCg3qOdW12a7dtlnBgwsLM-8mvQYHqAJCHZ8slcvcS1FmQILeGrVjQBDQauU8wt1lYdDy9lDOU2aMHz10ZXgAHPaadcfRDEUyV7i9Kk0M-sjLdL-zA2&t=ffffffffd98c31ca HTTP/1.1
Host: discover.observableeffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 18:20:21 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: text/javascript
Content-Encoding: gzip
Expires: Wed, 27 Mar 2024 18:12:26 GMT
Last-Modified: Tue, 28 Mar 2023 18:12:26 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 15068
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
discover.observableeffect.com/tracking/ScriptResource.axd?d=xARgfY1Y5X8aEZMj4CMV_7d-SCGTNgkD5_OJr5hktbupRrGGk0xwjydKItaBTXSS1IQaKFLG8hniSNLVXiuRnDi0NHYPs0RzbnLlOHxBJIJJnBcwYHtn-glBdiuleAUgR1CVv24ZZ4KKMs96Phy-xCcPnrFB2qJP_RAxWav7u59Zf9trvwYhu5tOPehO9oEQ0&t=3d6efc1f
200 OK 15 kB URL HTTP/1.1 discover.observableeffect.com/tracking/ScriptResource.axd?d=xARgfY1Y5X8aEZMj4CMV_7d-SCGTNgkD5_OJr5hktbupRrGGk0xwjydKItaBTXSS1IQaKFLG8hniSNLVXiuRnDi0NHYPs0RzbnLlOHxBJIJJnBcwYHtn-glBdiuleAUgR1CVv24ZZ4KKMs96Phy-xCcPnrFB2qJP_RAxWav7u59Zf9trvwYhu5tOPehO9oEQ0&t=3d6efc1f
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 920d5a308e191f3eb45e339d4ec0c6c0
e876779528aca5dbb8176d8a0d4c6fef3bb55997
a10901b062cf38ec26dced20aa6e21ae648da3f7b2329d312213bf65410fd5eb
GET /tracking/ScriptResource.axd?d=xARgfY1Y5X8aEZMj4CMV_7d-SCGTNgkD5_OJr5hktbupRrGGk0xwjydKItaBTXSS1IQaKFLG8hniSNLVXiuRnDi0NHYPs0RzbnLlOHxBJIJJnBcwYHtn-glBdiuleAUgR1CVv24ZZ4KKMs96Phy-xCcPnrFB2qJP_RAxWav7u59Zf9trvwYhu5tOPehO9oEQ0&t=3d6efc1f HTTP/1.1
Host: discover.observableeffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 18:20:21 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Wed, 27 Mar 2024 18:19:28 GMT
Last-Modified: Tue, 28 Mar 2023 18:19:28 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 15430
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
discover.observableeffect.com/tracking/ScriptResource.axd?d=hNW6POnPGlBpsgHzrXkbkNRsYjJfqlKgX7N9USosjlNHV_2qoA8qUAP8FSFcrgVQBs3iVg0CeFiaahF-MT9OTfY06tDzpvB9Wn2yXthfYAPYa7s3SZQ3LMcD6owK8cxvmIDgLKjJCW3TG1PmYKpMpidotmtLJ6-O_OUDPaGYBBlHIIl7Cs6oPvNgX-31tRao0&t=3d6efc1f
200 OK 48 kB URL HTTP/1.1 discover.observableeffect.com/tracking/ScriptResource.axd?d=hNW6POnPGlBpsgHzrXkbkNRsYjJfqlKgX7N9USosjlNHV_2qoA8qUAP8FSFcrgVQBs3iVg0CeFiaahF-MT9OTfY06tDzpvB9Wn2yXthfYAPYa7s3SZQ3LMcD6owK8cxvmIDgLKjJCW3TG1PmYKpMpidotmtLJ6-O_OUDPaGYBBlHIIl7Cs6oPvNgX-31tRao0&t=3d6efc1f
IP
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 65e51bb190f398cf313e227869acefa4
9c0afdcb3a5911b456552850af11533aeadaad9b
5970d86e577ebffa7cb9d9f4579c01e3258f47de0cdde8c26ed0834fe2a2fa52
GET /tracking/ScriptResource.axd?d=hNW6POnPGlBpsgHzrXkbkNRsYjJfqlKgX7N9USosjlNHV_2qoA8qUAP8FSFcrgVQBs3iVg0CeFiaahF-MT9OTfY06tDzpvB9Wn2yXthfYAPYa7s3SZQ3LMcD6owK8cxvmIDgLKjJCW3TG1PmYKpMpidotmtLJ6-O_OUDPaGYBBlHIIl7Cs6oPvNgX-31tRao0&t=3d6efc1f HTTP/1.1
Host: discover.observableeffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
HTTP/1.1 200 OK
Date: Tue, 28 Mar 2023 18:20:21 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Wed, 27 Mar 2024 18:19:28 GMT
Last-Modified: Tue, 28 Mar 2023 18:19:28 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 47752
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16894
Expires: Tue, 28 Mar 2023 23:01:56 GMT
Date: Tue, 28 Mar 2023 18:20:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16894
Expires: Tue, 28 Mar 2023 23:01:56 GMT
Date: Tue, 28 Mar 2023 18:20:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16894
Expires: Tue, 28 Mar 2023 23:01:56 GMT
Date: Tue, 28 Mar 2023 18:20:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be1cd1cf8e462ca6f6acb2f132e614d5
037f3bc7ab850fa2c69f2584bb24340b25bb6f3c
e212abd38fd1ccc428a4c480913938f8ea6e9da873ebe73df55cdbee7fff2efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E212ABD38FD1CCC428A4C480913938F8EA6E9DA873EBE73DF55CDBEE7FFF2EFA"
Last-Modified: Sun, 26 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16894
Expires: Tue, 28 Mar 2023 23:01:56 GMT
Date: Tue, 28 Mar 2023 18:20:22 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb739a909-c509-4c7a-b5a6-250435d88a54.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb739a909-c509-4c7a-b5a6-250435d88a54.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ada29e049501b12a35b0bcc5f68e3e57
5c1ba9bffbcc9007e7f119dbb3197db34a12f8da
b45583b5845129386a456e03fbdba25305c8d6d9fb5a8f01d783816ced080629
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb739a909-c509-4c7a-b5a6-250435d88a54.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10744
x-amzn-requestid: d693d820-7eed-47a3-9b0b-8f43c141bd3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CdbogF0poAMFTAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64220c9c-22ab350146e8a3a606f74c42;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:32 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: uCaEsILUx4u_fBJ7J9CgQanUW-BmV69mFvGRjZ0roFWluE_joVyVrA==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 21:48:21 GMT
age: 73921
etag: "5c1ba9bffbcc9007e7f119dbb3197db34a12f8da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c831201ad81f55c63c1b101ce854a810
0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5
c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5556
x-amzn-requestid: 6b050645-14aa-47f7-b4a5-2e27abbe5115
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM69eHE3IAMF0Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b71ef-6ab2948e2bf2578f29798372;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:23:59 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: U1WnpJASpWxPY-8kq-3g3_dKqm5l6UqhA0xUYijO5FDLGAxI2mLthg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 adc2002956acc4d61bfbf3b973fdf246.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Mar 2023 05:43:53 GMT
age: 45389
etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53327ce0-8541-4bc8-bd51-59cee099b396.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53327ce0-8541-4bc8-bd51-59cee099b396.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1da68df9d96e2758e37b9f15daab027b
5ff19ed6dc5752aa4b15fb88da972b736fd55783
ad924425946dbdf309c764e7097e676185516301feb7722b30d95ffd50b4353f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F53327ce0-8541-4bc8-bd51-59cee099b396.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7426
x-amzn-requestid: 85a30298-4613-4a96-bdba-0899fe9f9475
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CdcsgGZsoAMFQkw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64220e4f-10db431e7632048d7b15e0ec;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 21:44:47 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: VYUarzUegSCD6A4s7tUQ-0O1mjal3BAW7SiiXSpOnFEDd5-HHoA5Cw==
via: 1.1 f193acd25f2604e189bfbfaf539aaa06.cloudfront.net (CloudFront), 1.1 2e20768704c71ff3ce2e677251d27f3c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 21:55:21 GMT
age: 73501
etag: "5ff19ed6dc5752aa4b15fb88da972b736fd55783"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd937575-8f71-4732-8bca-faaeed83b6a1.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd937575-8f71-4732-8bca-faaeed83b6a1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5fdd8a3f935830ca9e5ffdb5824acebc
39caaddec703fdad962d03fff8687bad2c1df4ad
6fe6301fb3610c3e8a9b62671579db53189bb62ead4cf5ab30a1f1e0b90b8ca2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbd937575-8f71-4732-8bca-faaeed83b6a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7537
x-amzn-requestid: 4f7aaf6e-3eca-4033-aa21-27b5e7df6a0b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CdbupFURIAMFlZw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64220cc3-153c4e0b6b9d1b586c985f8d;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 21:38:11 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 07sU32yK0Sqkqg_YzC_cfw3stDMOa2cViR6IrpHw5cfSEjUOHTITAA==
via: 1.1 b6cdb2111444305bd4957a473b711ad6.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 21:48:37 GMT
age: 73905
etag: "39caaddec703fdad962d03fff8687bad2c1df4ad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F178b294b-fb7e-4482-a48e-31bbcc320554.png
200 OK 20 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F178b294b-fb7e-4482-a48e-31bbcc320554.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b3e093e7b5c12cfc2aee601f823ea47e
d76b3958471b2ed70a2b52f078ec638748fdb441
de4fc669195611c4ea6fe7d920482987aef077973b4973c01e2f362aeb18c2ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F178b294b-fb7e-4482-a48e-31bbcc320554.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 20349
x-amzn-requestid: 2de7d242-f277-42a6-9dc4-2fc98207a978
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CdbumFzOIAMF3hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64220cc3-5f20ad7b2216219138f7b557;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 21:38:11 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: pnby7LhwZDWxJHtyWBlI7l_AO8l-tjjTVHatiCKG2htZ4RQNQOZkgQ==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 21:48:21 GMT
age: 73921
etag: "d76b3958471b2ed70a2b52f078ec638748fdb441"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F858e946a-2e67-4e7b-b78f-763226855b6d.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F858e946a-2e67-4e7b-b78f-763226855b6d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 789f11978a1149984408fbbb9a2b3f81
078bd523107096bab5e26d42b18e316c253f1ca7
7974980290443b64126f512686261150cd27331cb7b32a96d1167a97d046e8a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F858e946a-2e67-4e7b-b78f-763226855b6d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8961
x-amzn-requestid: 9277e35d-8fe8-482e-b65c-b132dfcbd87e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CdbqBGl0IAMFy4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64220ca6-7869936b33cbf3633c68e7ac;Sampled=0
x-amzn-remapped-date: Mon, 27 Mar 2023 21:37:42 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: niXBcLXb34cBs5-FqU8flhIK5sZ_ykmhwnozGbLigHI3jwXySoF_xw==
via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Mon, 27 Mar 2023 21:49:49 GMT
age: 73833
etag: "078bd523107096bab5e26d42b18e316c253f1ca7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
discover.observableeffect.com/favicon.ico
404 Not Found 209 B URL HTTP/1.1 discover.observableeffect.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 18ffb59b61525f781cf9251045be575d
bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
GET /favicon.ico HTTP/1.1
Host: discover.observableeffect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://discover.observableeffect.com/unsub_verification.aspx?p=ZGlzY292ZXIub2JzZXJ2YWJsZWVmZmVjdC5jb20scmdhc3NtYW5AbnBhY29hdGluZ3MuY29tLDUyNTU3MS0yMDUwNzYtMTA2OTkwLTYyMTI5LTAtMCxodHRwczovL2F0bGlsYWNzdHJlZXQuY29tLzAvMC8wL3VjMGE3ZGY4NzAxNzgyNzM2Njg3NjQ5MmQzNzk0MmNiMCZ0cm5pZD1lYWI2MTkwOC1iZjkxLTQyMzQtOWQ2Ni0yNTc0NzM5ODhjNjM
HTTP/1.1 404 Not Found
Date: Tue, 28 Mar 2023 18:20:22 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips
Content-Length: 209
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
45.145.179.26
23.36.76.226