Report - gcc02.safelinks.protection.outlook.com/?url=gmail.net-login.com/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175&data=05|01|jtaiwo@oti.nyc.gov|fbbdc005b09d478eb1b108db2bbfbced|73d61799c28440228d4154cc4f1929ef|0|0|638151874732221755|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|1000|||&sdata=VgRS7ZRA0JbPnx5eqV8IM0F0b2bg5H/f/0yjNmkMq8k=&reserved=0

Report Overview

Submitted URL
gcc02.safelinks.protection.outlook.com/?url=gmail.net-login.com/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175&data=05|01|jtaiwo@oti.nyc.gov|fbbdc005b09d478eb1b108db2bbfbced|73d61799c28440228d4154cc4f1929ef|0|0|638151874732221755|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=|1000|||&sdata=VgRS7ZRA0JbPnx5eqV8IM0F0b2bg5H/f/0yjNmkMq8k=&reserved=0
IP
104.47.64.28
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2023-03-23 17:00:05
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-29T05:09:11Z	2.4 kB	6.2 kB	23.36.77.32
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-29T05:09:12Z	3.2 kB	50 kB	34.120.237.76
secured-login.net	94515	2015-05-21T05:16:01Z	2023-03-29T11:02:55Z	1.9 kB	864 B	34.207.36.197
gmail.net-login.com	167004	2016-09-30T15:25:43Z	2023-03-29T14:31:22Z	913 B	614 B	34.207.36.197
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-29T05:09:03Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-29T05:09:31Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-29T05:09:31Z	333 B	391 B	34.117.237.239
gcc02.safelinks.protection.outlook.com	29725	2019-09-25T11:04:07Z	2023-03-29T08:12:24Z	1.1 kB	1.7 kB	104.47.64.28
ocsp.r2m01.amazontrust.com	unknown	2022-10-12T22:43:53Z	2023-03-29T09:11:41Z	700 B	1.9 kB	54.230.80.227
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-29T05:09:32Z	606 B	127 B	35.162.144.216

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-03-23 17:00:03	low	Client IP	Internal IP	ET POLICY Observed DNS Query to KnowBe4 Simulated Phish Domain (net-login .com)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	gmail.net-login.com/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175	540 B	2023-03-29	2023-03-29
Pretty URL gmail.net-login.com/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175 IP 34.207.36.197 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 21:03:37 Last Seen2023-03-29 21:03:37 Times Seen1 Hash c3958ab001c0ac7f4d04df6ebb93112d 1c70dc31b848b73b355407652b76e8e95401ec8b 2556d85547e0239be82c8c6e31ecb78d567285a149b0af38173eefbce3c8e781 Loading...

HTTP Transactions (24)

	URL	IP	Response	Size
	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 65fc860bc043f3fb83bdc3debdcd322d 418010755deae099ef1284e402813c5837a10f42 d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171" Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13986 Expires: Thu, 23 Mar 2023 20:53:00 GMT Date: Thu, 23 Mar 2023 16:59:54 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash bea3185dd820a31c1981317f37c3456d 1a548a5d27270fc11df9011837a7149571cedd78 469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9" Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14664 Expires: Thu, 23 Mar 2023 21:04:18 GMT Date: Thu, 23 Mar 2023 16:59:54 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash 4ad6984a756720fbfff47b37a75513a2 355e35258114452af8b9638985ed9d8ef3bf0aca 43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5 HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Thu, 23 Mar 2023 16:15:07 GMT content-type: application/json age: 2687 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 51a5d4696a6090c295850554508b51ce c44e143c2223546e64b19f543b8101aaf3b11e97 8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF" Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15299 Expires: Thu, 23 Mar 2023 21:14:53 GMT Date: Thu, 23 Mar 2023 16:59:54 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash e7bace7c1e04d44012e37ddffe36e5d5 3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK x-amz-id-2: yGUEDdJ/Bow/grrrcwabRfwh2/E9k0E/yxsnoxHTJ9QgFaCkVLpjVqdPY2WF/Q/vtK7dc4bZ70Y= x-amz-request-id: V46HDERQ269DMEKX x-amz-server-side-encryption: AES256 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Thu, 23 Mar 2023 16:00:01 GMT age: 3593 last-modified: Sat, 11 Mar 2023 16:53:15 GMT etag: "e7bace7c1e04d44012e37ddffe36e5d5" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Thu, 23 Mar 2023 16:59:54 GMT content-type: application/json content-length: 12 access-control-expose-headers: content-type vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	gcc02.safelinks.protection.outlook.com/?url=https://gmail.net-login.com/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175&data=05\|01\|jtaiwo@oti.nyc.gov\|fbbdc005b09d478eb1b108db2bbfbced\|73d61799c28440228d4154cc4f1929ef\|0\|0\|638151874732221755\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|1000\|\|\|&sdata=VgRS7ZRA0JbPnx5eqV8IM0F0b2bg5H/f/0yjNmkMq8k=&reserved=0	104.47.64.28	302 Found	609 B
URL HTTP/1.1 gcc02.safelinks.protection.outlook.com/?url=https://gmail.net-login.com/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175&data=05\|01\|jtaiwo@oti.nyc.gov\|fbbdc005b09d478eb1b108db2bbfbced\|73d61799c28440228d4154cc4f1929ef\|0\|0\|638151874732221755\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|1000\|\|\|&sdata=VgRS7ZRA0JbPnx5eqV8IM0F0b2bg5H/f/0yjNmkMq8k=&reserved=0 IP 104.47.64.28:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (537), with CRLF line terminators Size 609 B (609 bytes) Hash b7ce38ce6fde1146687daaebd986ad0a 5adf665cdb3041676742ca356e7c6ef9b5629a30 ff4853c5cd73e03f85b951904cf8e404eb4a89384e2ef20fd0e792d18bcf5842 HTTP Headers GET /?url=https://gmail.net-login.com/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175&data=05\|01\|jtaiwo@oti.nyc.gov\|fbbdc005b09d478eb1b108db2bbfbced\|73d61799c28440228d4154cc4f1929ef\|0\|0\|638151874732221755\|Unknown\|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0=\|1000\|\|\|&sdata=VgRS7ZRA0JbPnx5eqV8IM0F0b2bg5H/f/0yjNmkMq8k=&reserved=0 HTTP/1.1 Host: gcc02.safelinks.protection.outlook.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1 HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://gmail.net-login.com/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175 Server: Microsoft-IIS/10.0 X-AspNetMvc-Version: 4.0 X-SL-GetUrlReputation-Verdict: Good X-Robots-Tag: noindex, nofollow X-AspNet-Version: 4.0.30319 X-ServerName: BL0GCC02WS905 X-ServerVersion: 15.20.6222.016 X-ServerLat: 408 X-SafeLinks-Tracking-Id: b314a135-2b78-4998-a167-08db2bc00657 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=Edge Date: Thu, 23 Mar 2023 16:59:54 GMT Connection: close Content-Length: 609

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Thu, 23 Mar 2023 16:14:33 GMT age: 2721 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	ocsp.r2m01.amazontrust.com/	54.230.80.227	200 OK	471 B
URL HTTP/1.1 ocsp.r2m01.amazontrust.com/ IP 54.230.80.227:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash ee09be8cc29675299db6b8382e993c49 cbface24c5cdf2aa812035318fd86be97ea2bd3c 5666836a251b84fe5152f8526ec9127d939071ea7a2c8eb528ed0e4c65ba7fa6 HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: 'max-age=158059' Date: Thu, 23 Mar 2023 16:59:55 GMT Etag: "641b723f-1d7" Last-Modified: Thu, 23 Mar 2023 15:36:27 GMT Server: ECAcc (dcb/7FC0) X-Cache: Miss from cloudfront Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: XlP82uO8_ZyTl3kdBHnro_UQBnh1flz0vrvN_5skbSMIxNpnn_EoIg== Age: 5008`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 050ca4dc2182e0a27573b0d9f32b7834 bec14dc5af0d0b32210470673511acd8db404308 b6129b9d1848f75265dca4446c5399927bdaf15c7b49c083765847b0fe276eaf HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "B6129B9D1848F75265DCA4446C5399927BDAF15C7B49C083765847B0FE276EAF" Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2698 Expires: Thu, 23 Mar 2023 17:44:53 GMT Date: Thu, 23 Mar 2023 16:59:55 GMT Connection: keep-alive`

	push.services.mozilla.com/	35.162.144.216	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 35.162.144.216:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: tdVrOAAsT7LnlgAdm3bkIg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: csBcaaaMsY62VqfUA6NwWoXLytE=`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA" Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8143 Expires: Thu, 23 Mar 2023 19:15:39 GMT Date: Thu, 23 Mar 2023 16:59:56 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA" Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8143 Expires: Thu, 23 Mar 2023 19:15:39 GMT Date: Thu, 23 Mar 2023 16:59:56 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash a0d3d7099bbc5fed74a6e78e1a3096bf 96afaf8b3ac053577c56aca5f4a20d8655ecb771 c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA" Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8143 Expires: Thu, 23 Mar 2023 19:15:39 GMT Date: Thu, 23 Mar 2023 16:59:56 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg	34.120.237.76	200 OK	4.9 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.9 kB (4912 bytes) Hash f4a771935927950222124e14b56046df d07fe53e4ac41048497b2732c017f6666c3eda9e 4e8388626074646c2336711be0a170ceab367c343648a32d2389dd87640251d0 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 4912 x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CM8H3Fl1IAMFYgA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT x-amz-cf-pop: HIO50-C1, SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: soxgrR0B6Rz79QysB7qbMTsNYmkYfG8doOMPpTEd9uLlrE6WTcDKdw== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:47:44 GMT age: 69132 etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg	34.120.237.76	200 OK	6.7 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.7 kB (6692 bytes) Hash c05bfdf1411a931d8ea9adc64b07bc74 156ef59e53564a4f2b27002b2695fafecd578d82 15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6692 x-amzn-requestid: 3a0f6a8d-89b1-43f4-8a15-8749bdbc047b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CM9d9FcOoAMFaFQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641b75f2-3540256d6be3d4f85bba65ea;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 21:41:06 GMT x-amz-cf-pop: SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: Jj5lAwItWYm45j5kLqQnd3fhsiGsiuSiSVtrBUOolyHvPAmCc0S71A== via: 1.1 e92cc925fc8895560cd0628c67f58828.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google date: Thu, 23 Mar 2023 07:54:24 GMT age: 32732 etag: "156ef59e53564a4f2b27002b2695fafecd578d82" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93c300c4-e707-428c-9ae5-d4699c20a7ef.jpeg	34.120.237.76	200 OK	6.0 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93c300c4-e707-428c-9ae5-d4699c20a7ef.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.0 kB (5950 bytes) Hash 800c2662fd6ab8829a02b7d63084c38d 0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239 76545e9f75dc558fdb7b54550934c7775318fb4150a9309f60e65d982d2e576e HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93c300c4-e707-428c-9ae5-d4699c20a7ef.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 5950 x-amzn-requestid: ce85112e-428d-4ca1-9dac-1d6c8c6dc74a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CKyF9EI3oAMFtyQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641a96f2-05c5948d6f74948b1c67d68c;Sampled=0 x-amzn-remapped-date: Wed, 22 Mar 2023 05:49:38 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: tu0ENc_6tfykYc23nLfwYEMsi5HIfaDWF6dvzVTfX5rfjr3JrmMrCA== via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 aabd01c4a20dae837d162bd972422efc.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 22:02:44 GMT age: 68232 etag: "0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg	34.120.237.76	200 OK	10 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 10 kB (10480 bytes) Hash 6f0b9e85381489dcf646c251722b21d4 5f7ea91288a2170bcabdca6be296718c4191eacd 911f803271ad9053ebac3787bdde9b75ec604acc6aa28692cc8e4c5c4fb61483 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08561a1f-1d19-45db-be98-107d6b1ed25d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10480 x-amzn-requestid: 58aa8272-4b4e-4a2f-9d6e-d47f70891c49 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CJptHG7JoAMFSwA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641a2320-2fd6502b1271d5c13b4ebbe9;Sampled=0 x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:28 GMT x-amz-cf-pop: SEA19-C1, SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: pFCYGtd2b7lK7OBFHjCsgqqLfhtMAQDB0vyYFyf1sv-3CkSHbEh3mA== via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:59:52 GMT age: 68404 etag: "5f7ea91288a2170bcabdca6be296718c4191eacd" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg	34.120.237.76	200 OK	10 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 10 kB (10407 bytes) Hash 2062cf7a271d4ac7a04c0a746d443e07 3343851f2128c5f1fe4302c2aa53e8ce1fb661ac e479263c1742d2597cf8948ef059b0bc97dbb97f47bb5cafee3d4af12069d2ce HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2f57fa6-bac5-42a3-be66-ebcc96d82ea2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10407 x-amzn-requestid: 87aba2e6-d7e8-4456-a12f-e05ac556b839 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CJqJhGnXIAMF1yA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641a23d6-2b6c3d62366f47f506ce8415;Sampled=0 x-amzn-remapped-date: Tue, 21 Mar 2023 21:38:30 GMT x-amz-cf-pop: SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: lKww3e9Hvk0r0LPn7u6pu6Fx9V8RThNVxQEdyWVFAQdOun-53X-tLw== via: 1.1 b3cdce1c2fc39b89f45c98c417351f26.cloudfront.net (CloudFront), 1.1 aa623e134417515bd2496cb01d5e5626.cloudfront.net (CloudFront), 1.1 google date: Wed, 22 Mar 2023 21:49:35 GMT age: 69021 etag: "3343851f2128c5f1fe4302c2aa53e8ce1fb661ac" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F772d9c75-9796-494f-9fc4-91d04e2bac53.jpeg	34.120.237.76	200 OK	4.9 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F772d9c75-9796-494f-9fc4-91d04e2bac53.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.9 kB (4905 bytes) Hash 90f64fe111aa6e90ebf52e0335d21b75 4f25bdbffca3803b02c196c38491223684d36b4d 37894e16112286470b7fd2e0bbd5ca74944e6cb5ca6e8aff189c4515122a0d40 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F772d9c75-9796-494f-9fc4-91d04e2bac53.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 4905 x-amzn-requestid: f2297c3e-1187-48f5-bffb-c5ea1a79a10b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CBFgcF4_oAMFd6A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6416b602-02696af01c0d586c631c5b45;Sampled=0 x-amzn-remapped-date: Sun, 19 Mar 2023 07:13:06 GMT x-amz-cf-pop: SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: R9mjcik3i0kISOeO4gVZP6XhhvZO00mriabAtJ8vv1kNhRpz_lfsHQ== via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google date: Thu, 23 Mar 2023 06:31:03 GMT age: 37733 etag: "4f25bdbffca3803b02c196c38491223684d36b4d" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	ocsp.r2m01.amazontrust.com/	54.230.80.227	200 OK	471 B
URL HTTP/1.1 ocsp.r2m01.amazontrust.com/ IP 54.230.80.227:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash ee09be8cc29675299db6b8382e993c49 cbface24c5cdf2aa812035318fd86be97ea2bd3c 5666836a251b84fe5152f8526ec9127d939071ea7a2c8eb528ed0e4c65ba7fa6 HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: 'max-age=158059' Date: Thu, 23 Mar 2023 16:59:58 GMT Etag: "641b723f-1d7" Last-Modified: Thu, 23 Mar 2023 15:55:41 GMT Server: ECAcc (dcb/7352) X-Cache: Miss from cloudfront Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: x6_hjv23N9rHAwFxQUylVaZ5c59yOEZYdErkMf1nV-LMzXP8QBw-FQ== Age: 3857`

	secured-login.net/favicon.ico	34.207.36.197	200 OK	0 B
URL HTTP/2 secured-login.net/favicon.ico IP 34.207.36.197:0 ASN #14618 AMAZON-AES File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /favicon.ico HTTP/1.1 Host: secured-login.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://secured-login.net/pages/96ba6df42eedc8879844bac5a1b61942/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw== Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Thu, 23 Mar 2023 16:59:59 GMT content-type: image/vnd.microsoft.icon content-length: 0 last-modified: Thu, 23 Mar 2023 15:47:21 GMT strict-transport-security: max-age=63113904; includeSubDomains; preload X-Firefox-Spdy: h2`

	gmail.net-login.com/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175	34.207.36.197	200 OK	0 B
URL HTTP/2 gmail.net-login.com/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175 IP 34.207.36.197:0 ASN #14618 AMAZON-AES File type Size 0 B (0 bytes) Hash HTTP Headers GET /XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==?cid=1517968175 HTTP/1.1 Host: gmail.net-login.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1 HTTP/2 200 OK date: Thu, 23 Mar 2023 16:59:58 GMT content-type: text/html; charset=utf-8 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: no-referrer-when-downgrade etag: W/"f87a3e9f839448f3721878038e200a10" cache-control: max-age=0, private, must-revalidate content-security-policy: x-request-id: fd5b6363-ab30-466e-9986-2908c0239c19 x-protected-by: Sqreen x-runtime: 2.521856 strict-transport-security: max-age=63113904; includeSubDomains; preload X-Firefox-Spdy: h2

	secured-login.net/pages/96ba6df42eedc8879844bac5a1b61942/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw==	34.207.36.197	200 OK	0 B
URL HTTP/2 secured-login.net/pages/96ba6df42eedc8879844bac5a1b61942/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw== IP 34.207.36.197:0 ASN #14618 AMAZON-AES File type Size 0 B (0 bytes) Hash HTTP Headers GET /pages/96ba6df42eedc8879844bac5a1b61942/XVlhSYVlUYzJSbTE0WTFsVU9TdGpabkpYYUU5aWJpdG5hWEUzVGs5aVEzSXJSMkpOU0RsMmJsUTJkM1psU0VORmFGSldNVlo1V1dKT1dUWlJPRFppV0cxcGNsSnNUV28wUVhoRVRWcE1Xa000UVVNNFQwbHdhbEZHVkU4MVZXbHFWRVZzTW5KcFIyaFlWMk1yTXpWUE9XdFdiMmRXWkZRdlYzQkZLM0Z1VEVRelFVTTFNRWxaZFc1aE5EVlNSRTh5V0RNMFppdDJVRFJhUmpBM2IyRlhXVXh1WTFkTk5FeFdNVEpRYW1OdE4yNUdiM2g0UWpWV2VFaHlkbFJoTTBOcExTMWpibk0wS3pOdWRYSTBaMmxMVDB3d09WRnRkR0ZSUFQwPS0tMjE5Njk2ZGRmZWY4ZWU3ZDkyOThmNGRlNzRiNWEyM2U4NjVhZDFiNw== HTTP/1.1 Host: secured-login.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://gmail.net-login.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site HTTP/2 200 OK date: Thu, 23 Mar 2023 16:59:58 GMT content-type: text/html; charset=utf-8 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: no-referrer-when-downgrade etag: W/"01a432b43b929122a2c355002baf21a4" cache-control: max-age=0, private, must-revalidate content-security-policy: x-request-id: d5c1f6b4-1f12-4c24-ad2e-f55218b34112 x-protected-by: Sqreen x-runtime: 0.150243 strict-transport-security: max-age=63113904; includeSubDomains; preload X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (24)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type