Report - urldefense.com/v3/__https://u20560253.ct.sendgrid.net/ls/click?upn=v6g1vCOyNSZiIwXC2vGr9a6r8RF4egdO6bvGuS8gKGXHur5H7MtkFNrCtDqqEGJPHTtVowVxqpIoOXYoI3Z98YACiO25nAwYqQNODDlr-2BfGTuDec5qd7T2f2ZFK-2BO-2BlPNP68PgjYVecCUh1VnKZC4UvzOh4-2B-2BbXhNIiFDFDj5oWUa80U7ZsVxwr5cvcc7EG4IEnZXZzvIYj-2BHmhqpVfevpxoEHV1UqEMWuvAPu0Tx-2Fk-3DKwck_9uxlpZRz90pvjpV1-2B1dRvDuXmdn18myM6fahp-2BXoBj-2BYmjNuseMhMHIVP2EW1V7MIyIgRmGYXXarjps1iZDkLQbXtz-2FxtTRyD1ZSJWV-2FKCnSMzLQqte-2F-2BvX-2FS9yjnJAdCgGR13Y6ehvd3Vo9Dy2bOvEwx2T7sEPzsh45O0qEFFvkepjuai1vAlsg89IV4u-2FXNulo3xsbQ2HNFSHA7UlcfAyuTrGe6Yk-2B0fh2MPxmMc9p5WHTSQNfKVYxsDjJEpVV5EJMsIOJYQhQ7tYSI2CVMw-3D-3D__;!!CiF3mHgEawk!BsGGfS-ZMQ65BIPMrRxNn3T2V9MHbQqx03UpLgwNAopzL4higWy8

Report Overview

Submitted URL
urldefense.com/v3/__https://u20560253.ct.sendgrid.net/ls/click?upn=v6g1vCOyNSZiIwXC2vGr9a6r8RF4egdO6bvGuS8gKGXHur5H7MtkFNrCtDqqEGJPHTtVowVxqpIoOXYoI3Z98YACiO25nAwYqQNODDlr-2BfGTuDec5qd7T2f2ZFK-2BO-2BlPNP68PgjYVecCUh1VnKZC4UvzOh4-2B-2BbXhNIiFDFDj5oWUa80U7ZsVxwr5cvcc7EG4IEnZXZzvIYj-2BHmhqpVfevpxoEHV1UqEMWuvAPu0Tx-2Fk-3DKwck_9uxlpZRz90pvjpV1-2B1dRvDuXmdn18myM6fahp-2BXoBj-2BYmjNuseMhMHIVP2EW1V7MIyIgRmGYXXarjps1iZDkLQbXtz-2FxtTRyD1ZSJWV-2FKCnSMzLQqte-2F-2BvX-2FS9yjnJAdCgGR13Y6ehvd3Vo9Dy2bOvEwx2T7sEPzsh45O0qEFFvkepjuai1vAlsg89IV4u-2FXNulo3xsbQ2HNFSHA7UlcfAyuTrGe6Yk-2B0fh2MPxmMc9p5WHTSQNfKVYxsDjJEpVV5EJMsIOJYQhQ7tYSI2CVMw-3D-3D__;!!CiF3mHgEawk!BsGGfS-ZMQ65BIPMrRxNn3T2V9MHbQqx03UpLgwNAopzL4higWy8_Y9shTs4H4QiYsGl3s6faSsWcJVbipT4$
IP
52.204.90.22
ASN
#14618 AMAZON-AES
Submitted
2023-02-06 15:32:34
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	69 kB	34.120.237.76
api.trackship.shipengine.com	153937	2020-06-01T21:34:44Z	2023-01-18T10:50:00Z	5.0 kB	8.6 kB	143.204.55.18
fonts.googleapis.com	8877	2013-06-10T22:14:26Z	2023-03-13T08:14:31Z	432 B	4.6 kB	142.250.74.106
resources.stamps.com	274751	2020-05-28T00:36:52Z	2023-01-18T10:50:00Z	414 B	25 kB	54.230.111.84
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-13T06:00:13Z	341 B	737 B	93.184.220.29
logos.shipstation.com	246858	2018-09-17T15:05:58Z	2022-12-12T21:53:54Z	415 B	2.6 kB	54.230.111.115
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
urldefense.com	61470	2015-04-27T18:20:15Z	2023-03-13T08:16:22Z	1.2 kB	811 B	52.204.90.22
ocsp.sca1b.amazontrust.com	1015	2017-03-03T16:20:51Z	2019-03-27T05:05:54Z	1.4 kB	3.9 kB	143.204.42.165
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	1.4 kB	2.8 kB	142.250.74.131
fonts.gstatic.com	unknown	2014-09-09T02:40:21Z	2023-03-13T08:44:36Z	489 B	17 kB	142.250.74.35
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.9 kB	34.160.144.191
ocsp.sectigo.com	487	2019-11-29T12:50:24Z	2023-03-13T08:22:43Z	340 B	963 B	172.64.155.188
ocsp.godaddy.com	698	2012-05-20T21:28:57Z	2023-03-13T05:12:19Z	340 B	2.3 kB	192.124.249.23
u20560253.ct.sendgrid.net	878477	2022-06-04T00:39:33Z	2022-08-15T17:21:53Z	1.0 kB	567 B	167.89.115.54
trackshipment.endicia.com	unknown	2020-10-10T00:47:17Z	2023-02-09T05:20:46Z	2.7 kB	1.6 MB	143.204.55.76
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.4 kB	6.2 kB	23.33.119.27
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	52.35.19.71

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	trackshipment.endicia.com/static/js/582.26d032d5.chunk.js	4.5 kB	2023-03-13	2023-03-13
Pretty URL trackshipment.endicia.com/static/js/582.26d032d5.chunk.js IP 143.204.55.76 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 18:27:56 Last Seen2023-03-13 18:27:56 Times Seen1 Hash 3ee4e3a85ff4533127d79c2e6ae5c439 f7e5e77e479b7d9923821e086fb3e69f90c4184d 59e36e6c2b66b2bbe20e6d40a74193a390ac23777fdf861894d925ee18cdcc21 Loading...

	trackshipment.endicia.com/static/js/main.d7c8f67c.js	1.6 MB	2023-03-13	2023-03-13
Pretty URL trackshipment.endicia.com/static/js/main.d7c8f67c.js IP 143.204.55.76 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 18:27:56 Last Seen2023-03-13 18:27:56 Times Seen1 Hash d653b6ce884041790b5a6e054e3cd5e4 79d4626c21832fc124329f8f6c328ab306cd8ff2 b83ba0630fe46c756a4e049ca652ce5f62b6d77b53dc8c78b89b120e5dde8cd1 Loading...

HTTP Transactions (49)

	URL	IP	Response	Size
	r3.o.lencr.org/	23.33.119.27	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 507011ccb9124dcd57e84a90a0965cc4 1a6575d0ac979c7184490cc9836ac4812ad2afd1 01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5477 Expires: Mon, 06 Feb 2023 17:03:40 GMT Date: Mon, 06 Feb 2023 15:32:23 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.33.119.27	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash c21ba65e44ac95470c314e068e49a9eb 17a13b13738993d889d4afa3d848dc63bf6eba64 9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66" Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2442 Expires: Mon, 06 Feb 2023 16:13:05 GMT Date: Mon, 06 Feb 2023 15:32:23 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.33.119.27	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash fb7b6b46e708ad73eaaa3c21e74569ae 950663c025acad81556af5aa3022ecc9d55097fe 763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64" Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16502 Expires: Mon, 06 Feb 2023 20:07:25 GMT Date: Mon, 06 Feb 2023 15:32:23 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash bf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 06 Feb 2023 14:36:27 GMT content-type: application/json age: 3356 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 7b922915ebf1fa3639b333f994c74f24 144a3f80b98fd0652d4614f24cf6cbbee40f8938 adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: 3v4zaxkSHDYxN/V9WUvhZMU5U7SHALVEz7ForxH/h8PN1tCMP6IUaDEmpxcAjHfwvItFvqejlR6PcrYTbvnj/w== x-amz-request-id: 10GX4AJ5Y9NP8Q1E content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 06 Feb 2023 14:53:44 GMT age: 2319 last-modified: Mon, 09 Jan 2023 18:04:21 GMT etag: "7b922915ebf1fa3639b333f994c74f24" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	ocsp.sectigo.com/	172.64.155.188	200 OK	471 B
URL HTTP/1.1 ocsp.sectigo.com/ IP 172.64.155.188:0 ASN #13335 CLOUDFLARENET File type data Size 471 B (471 bytes) Hash 9eb2d96134e4f0dc6335df5a72d928e1 6a7fab08cde2d0ddbedb334340399078b31c9ae8 8c454b20058e18d69f23fd94158d85bc82625ac06cae367194125a114da03d26 HTTP Headers `POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Mon, 06 Feb 2023 15:32:23 GMT Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Last-Modified: Sat, 04 Feb 2023 07:56:05 GMT Expires: Sat, 11 Feb 2023 07:56:04 GMT Etag: "6a7fab08cde2d0ddbedb334340399078b31c9ae8" Cache-Control: max-age=404020,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb1 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7954f02c8eefb50b-OSL`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Mon, 06 Feb 2023 15:32:23 GMT content-type: application/json content-length: 12 access-control-expose-headers: content-type vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	urldefense.com/v3/__https://u20560253.ct.sendgrid.net/ls/click?upn=v6g1vCOyNSZiIwXC2vGr9a6r8RF4egdO6bvGuS8gKGXHur5H7MtkFNrCtDqqEGJPHTtVowVxqpIoOXYoI3Z98YACiO25nAwYqQNODDlr-2BfGTuDec5qd7T2f2ZFK-2BO-2BlPNP68PgjYVecCUh1VnKZC4UvzOh4-2B-2BbXhNIiFDFDj5oWUa80U7ZsVxwr5cvcc7EG4IEnZXZzvIYj-2BHmhqpVfevpxoEHV1UqEMWuvAPu0Tx-2Fk-3DKwck_9uxlpZRz90pvjpV1-2B1dRvDuXmdn18myM6fahp-2BXoBj-2BYmjNuseMhMHIVP2EW1V7MIyIgRmGYXXarjps1iZDkLQbXtz-2FxtTRyD1ZSJWV-2FKCnSMzLQqte-2F-2BvX-2FS9yjnJAdCgGR13Y6ehvd3Vo9Dy2bOvEwx2T7sEPzsh45O0qEFFvkepjuai1vAlsg89IV4u-2FXNulo3xsbQ2HNFSHA7UlcfAyuTrGe6Yk-2B0fh2MPxmMc9p5WHTSQNfKVYxsDjJEpVV5EJMsIOJYQhQ7tYSI2CVMw-3D-3D__;!!CiF3mHgEawk!BsGGfS-ZMQ65BIPMrRxNn3T2V9MHbQqx03UpLgwNAopzL4higWy8_Y9shTs4H4QiYsGl3s6faSsWcJVbipT4$	52.204.90.22	302 Found	0 B
URL HTTP/2 urldefense.com/v3/__https://u20560253.ct.sendgrid.net/ls/click?upn=v6g1vCOyNSZiIwXC2vGr9a6r8RF4egdO6bvGuS8gKGXHur5H7MtkFNrCtDqqEGJPHTtVowVxqpIoOXYoI3Z98YACiO25nAwYqQNODDlr-2BfGTuDec5qd7T2f2ZFK-2BO-2BlPNP68PgjYVecCUh1VnKZC4UvzOh4-2B-2BbXhNIiFDFDj5oWUa80U7ZsVxwr5cvcc7EG4IEnZXZzvIYj-2BHmhqpVfevpxoEHV1UqEMWuvAPu0Tx-2Fk-3DKwck_9uxlpZRz90pvjpV1-2B1dRvDuXmdn18myM6fahp-2BXoBj-2BYmjNuseMhMHIVP2EW1V7MIyIgRmGYXXarjps1iZDkLQbXtz-2FxtTRyD1ZSJWV-2FKCnSMzLQqte-2F-2BvX-2FS9yjnJAdCgGR13Y6ehvd3Vo9Dy2bOvEwx2T7sEPzsh45O0qEFFvkepjuai1vAlsg89IV4u-2FXNulo3xsbQ2HNFSHA7UlcfAyuTrGe6Yk-2B0fh2MPxmMc9p5WHTSQNfKVYxsDjJEpVV5EJMsIOJYQhQ7tYSI2CVMw-3D-3D__;!!CiF3mHgEawk!BsGGfS-ZMQ65BIPMrRxNn3T2V9MHbQqx03UpLgwNAopzL4higWy8_Y9shTs4H4QiYsGl3s6faSsWcJVbipT4$ IP 52.204.90.22:0 ASN #14618 AMAZON-AES File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /v3/__https://u20560253.ct.sendgrid.net/ls/click?upn=v6g1vCOyNSZiIwXC2vGr9a6r8RF4egdO6bvGuS8gKGXHur5H7MtkFNrCtDqqEGJPHTtVowVxqpIoOXYoI3Z98YACiO25nAwYqQNODDlr-2BfGTuDec5qd7T2f2ZFK-2BO-2BlPNP68PgjYVecCUh1VnKZC4UvzOh4-2B-2BbXhNIiFDFDj5oWUa80U7ZsVxwr5cvcc7EG4IEnZXZzvIYj-2BHmhqpVfevpxoEHV1UqEMWuvAPu0Tx-2Fk-3DKwck_9uxlpZRz90pvjpV1-2B1dRvDuXmdn18myM6fahp-2BXoBj-2BYmjNuseMhMHIVP2EW1V7MIyIgRmGYXXarjps1iZDkLQbXtz-2FxtTRyD1ZSJWV-2FKCnSMzLQqte-2F-2BvX-2FS9yjnJAdCgGR13Y6ehvd3Vo9Dy2bOvEwx2T7sEPzsh45O0qEFFvkepjuai1vAlsg89IV4u-2FXNulo3xsbQ2HNFSHA7UlcfAyuTrGe6Yk-2B0fh2MPxmMc9p5WHTSQNfKVYxsDjJEpVV5EJMsIOJYQhQ7tYSI2CVMw-3D-3D__;!!CiF3mHgEawk!BsGGfS-ZMQ65BIPMrRxNn3T2V9MHbQqx03UpLgwNAopzL4higWy8_Y9shTs4H4QiYsGl3s6faSsWcJVbipT4$ HTTP/1.1 Host: urldefense.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1 HTTP/2 302 Found date: Mon, 06 Feb 2023 15:32:23 GMT content-length: 0 location: https://u20560253.ct.sendgrid.net/ls/click?upn=v6g1vCOyNSZiIwXC2vGr9a6r8RF4egdO6bvGuS8gKGXHur5H7MtkFNrCtDqqEGJPHTtVowVxqpIoOXYoI3Z98YACiO25nAwYqQNODDlr-2BfGTuDec5qd7T2f2ZFK-2BO-2BlPNP68PgjYVecCUh1VnKZC4UvzOh4-2B-2BbXhNIiFDFDj5oWUa80U7ZsVxwr5cvcc7EG4IEnZXZzvIYj-2BHmhqpVfevpxoEHV1UqEMWuvAPu0Tx-2Fk-3DKwck_9uxlpZRz90pvjpV1-2B1dRvDuXmdn18myM6fahp-2BXoBj-2BYmjNuseMhMHIVP2EW1V7MIyIgRmGYXXarjps1iZDkLQbXtz-2FxtTRyD1ZSJWV-2FKCnSMzLQqte-2F-2BvX-2FS9yjnJAdCgGR13Y6ehvd3Vo9Dy2bOvEwx2T7sEPzsh45O0qEFFvkepjuai1vAlsg89IV4u-2FXNulo3xsbQ2HNFSHA7UlcfAyuTrGe6Yk-2B0fh2MPxmMc9p5WHTSQNfKVYxsDjJEpVV5EJMsIOJYQhQ7tYSI2CVMw-3D-3D strict-transport-security: max-age=31536000 x-robots-tag: noindex, nofollow, noindex, nofollow X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 06 Feb 2023 14:51:19 GMT age: 2464 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	ocsp.godaddy.com/	192.124.249.23	200 OK	1.8 kB
URL HTTP/1.1 ocsp.godaddy.com/ IP 192.124.249.23:0 ASN #30148 SUCURI-SEC File type data Size 1.8 kB (1778 bytes) Hash c08451265388545cea4830aa7236eaf2 513b03a3692d3b494e87cc8fd931a9ce435f62b1 ce6ddb7e6b9dddfb3a1c593e3745379fb726f448cc58d1c436cd59cc9108a5ae HTTP Headers `POST / HTTP/1.1 Host: ocsp.godaddy.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 76 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Mon, 06 Feb 2023 15:32:23 GMT Content-Type: application/ocsp-response Content-Length: 1778 Connection: keep-alive X-Sucuri-ID: 19023 Content-Transfer-Encoding: Binary Cache-Control: public, no-transform, must-revalidate Last-Modified: Sun, 05 Feb 2023 21:25:34 GMT Expires: Mon, 06 Feb 2023 21:25:34 GMT ETag: "513b03a3692d3b494e87cc8fd931a9ce435f62b1" P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"`

	r3.o.lencr.org/	23.33.119.27	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 9b88bae61bca33aba8aa99f6128db8d9 a07b61fb2458917699613fcae68710941b595416 54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA" Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=19107 Expires: Mon, 06 Feb 2023 20:50:50 GMT Date: Mon, 06 Feb 2023 15:32:23 GMT Connection: keep-alive`

	u20560253.ct.sendgrid.net/ls/click?upn=v6g1vCOyNSZiIwXC2vGr9a6r8RF4egdO6bvGuS8gKGXHur5H7MtkFNrCtDqqEGJPHTtVowVxqpIoOXYoI3Z98YACiO25nAwYqQNODDlr-2BfGTuDec5qd7T2f2ZFK-2BO-2BlPNP68PgjYVecCUh1VnKZC4UvzOh4-2B-2BbXhNIiFDFDj5oWUa80U7ZsVxwr5cvcc7EG4IEnZXZzvIYj-2BHmhqpVfevpxoEHV1UqEMWuvAPu0Tx-2Fk-3DKwck_9uxlpZRz90pvjpV1-2B1dRvDuXmdn18myM6fahp-2BXoBj-2BYmjNuseMhMHIVP2EW1V7MIyIgRmGYXXarjps1iZDkLQbXtz-2FxtTRyD1ZSJWV-2FKCnSMzLQqte-2F-2BvX-2FS9yjnJAdCgGR13Y6ehvd3Vo9Dy2bOvEwx2T7sEPzsh45O0qEFFvkepjuai1vAlsg89IV4u-2FXNulo3xsbQ2HNFSHA7UlcfAyuTrGe6Yk-2B0fh2MPxmMc9p5WHTSQNfKVYxsDjJEpVV5EJMsIOJYQhQ7tYSI2CVMw-3D-3D	167.89.115.54	302 Found	202 B
URL HTTP/1.1 u20560253.ct.sendgrid.net/ls/click?upn=v6g1vCOyNSZiIwXC2vGr9a6r8RF4egdO6bvGuS8gKGXHur5H7MtkFNrCtDqqEGJPHTtVowVxqpIoOXYoI3Z98YACiO25nAwYqQNODDlr-2BfGTuDec5qd7T2f2ZFK-2BO-2BlPNP68PgjYVecCUh1VnKZC4UvzOh4-2B-2BbXhNIiFDFDj5oWUa80U7ZsVxwr5cvcc7EG4IEnZXZzvIYj-2BHmhqpVfevpxoEHV1UqEMWuvAPu0Tx-2Fk-3DKwck_9uxlpZRz90pvjpV1-2B1dRvDuXmdn18myM6fahp-2BXoBj-2BYmjNuseMhMHIVP2EW1V7MIyIgRmGYXXarjps1iZDkLQbXtz-2FxtTRyD1ZSJWV-2FKCnSMzLQqte-2F-2BvX-2FS9yjnJAdCgGR13Y6ehvd3Vo9Dy2bOvEwx2T7sEPzsh45O0qEFFvkepjuai1vAlsg89IV4u-2FXNulo3xsbQ2HNFSHA7UlcfAyuTrGe6Yk-2B0fh2MPxmMc9p5WHTSQNfKVYxsDjJEpVV5EJMsIOJYQhQ7tYSI2CVMw-3D-3D IP 167.89.115.54:0 ASN #11377 SENDGRID File type HTML document, ASCII text Size 202 B (202 bytes) Hash 8e578ab160fdd51d5c163a215f53b22d 2ccbf2d135ebaf984809004f5cba8b708e777b31 aeadcb46aa5d1765948e771708ce2bd27683e49f0e6879f4bc21768b08586410 HTTP Headers GET /ls/click?upn=v6g1vCOyNSZiIwXC2vGr9a6r8RF4egdO6bvGuS8gKGXHur5H7MtkFNrCtDqqEGJPHTtVowVxqpIoOXYoI3Z98YACiO25nAwYqQNODDlr-2BfGTuDec5qd7T2f2ZFK-2BO-2BlPNP68PgjYVecCUh1VnKZC4UvzOh4-2B-2BbXhNIiFDFDj5oWUa80U7ZsVxwr5cvcc7EG4IEnZXZzvIYj-2BHmhqpVfevpxoEHV1UqEMWuvAPu0Tx-2Fk-3DKwck_9uxlpZRz90pvjpV1-2B1dRvDuXmdn18myM6fahp-2BXoBj-2BYmjNuseMhMHIVP2EW1V7MIyIgRmGYXXarjps1iZDkLQbXtz-2FxtTRyD1ZSJWV-2FKCnSMzLQqte-2F-2BvX-2FS9yjnJAdCgGR13Y6ehvd3Vo9Dy2bOvEwx2T7sEPzsh45O0qEFFvkepjuai1vAlsg89IV4u-2FXNulo3xsbQ2HNFSHA7UlcfAyuTrGe6Yk-2B0fh2MPxmMc9p5WHTSQNfKVYxsDjJEpVV5EJMsIOJYQhQ7tYSI2CVMw-3D-3D HTTP/1.1 Host: u20560253.ct.sendgrid.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1 `HTTP/1.1 302 Found Server: nginx Date: Mon, 06 Feb 2023 15:32:23 GMT Content-Type: text/html; charset=utf-8 Content-Length: 202 Connection: keep-alive Location: https://trackshipment.endicia.com/?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&locale=en&postal_code=02898 X-Robots-Tag: noindex, nofollow`

	ocsp.sca1b.amazontrust.com/	143.204.42.165	200 OK	471 B
URL HTTP/1.1 ocsp.sca1b.amazontrust.com/ IP 143.204.42.165:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 41be81f378910954cd2d39f84a0948f2 a0d80078226d77f30de7f157e02094219346c33c 54536120b071e09732bfcb7a58b1649bdabeeaf1633122349269f36412c74911 HTTP Headers `POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=152850 Date: Mon, 06 Feb 2023 15:32:23 GMT Etag: "63e0b7db-1d7" Expires: Wed, 08 Feb 2023 09:59:53 GMT Last-Modified: Mon, 06 Feb 2023 08:18:35 GMT Server: ECS (bsa/EB24) X-Cache: Miss from cloudfront Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: vzEoO6bnCH-8aOtx45ThA7t-aFqKYOTe2BoqLHCSmDqpJJOLT3a7wg== Age: 6078

	push.services.mozilla.com/	52.35.19.71	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 52.35.19.71:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: IjIwGherTK+Uo9eTuOc1ww== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: oe+3A6RUys16FsNL9GT1RwhNYJI=`

	trackshipment.endicia.com/?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&locale=en&postal_code=02898	143.204.55.76	200 OK	754 B
URL HTTP/1.1 trackshipment.endicia.com/?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&locale=en&postal_code=02898 IP 143.204.55.76:0 ASN #16509 AMAZON-02 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (754), with no line terminators Size 754 B (754 bytes) Hash 22398cf4bfe93d9c14b7677320de6345 585118c0f62e6e7455f78b9f84764cf9b3c35620 be437d6e59cf5c1c603a5e08368dec6a18f78c31abb8bc4a1245b59e5fa69a6c HTTP Headers GET /?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&locale=en&postal_code=02898 HTTP/1.1 Host: trackshipment.endicia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1 HTTP/1.1 200 OK Content-Type: text/html Content-Length: 754 Connection: keep-alive Last-Modified: Thu, 10 Nov 2022 11:04:31 GMT Server: AmazonS3 Date: Mon, 06 Feb 2023 15:32:25 GMT Etag: "22398cf4bfe93d9c14b7677320de6345" Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront) X-Frame-Options: DENY X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Content-Security-Policy: style-src 'self' fonts.googleapis.com 'unsafe-inline'; script-src 'self'; font-src 'self' fonts.gstatic.com data:; img-src 'self' http: data:; connect-src .shipstation.com .shippingeasy.com .stamps.com .endicia.com .shipengine.com cdn.segment.com api.segment.io .ingest.sentry.io; manifest-src .shipstation.com .shippingeasy.com .stamps.com .endicia.com *.shipengine.com; script-src-elem cdn.segment.com 'self'; frame-ancestors http: Strict-Transport-Security: Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: tnLpQfWU5veM5g4HJC4v948k0MeBJh5xtv2CN6IJ3NZ9OdyvZeS59g==

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 26a15a1b880ec1026360b696b1c27074 fd35f80a1cf599da2a8e68a44477465a580440a5 a6d5caec988319523c120bc435a4ff0200b7ead114db10db19a09caeace978f7 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 06 Feb 2023 15:32:24 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 26a15a1b880ec1026360b696b1c27074 fd35f80a1cf599da2a8e68a44477465a580440a5 a6d5caec988319523c120bc435a4ff0200b7ead114db10db19a09caeace978f7 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 06 Feb 2023 15:32:24 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	trackshipment.endicia.com/static/js/main.d7c8f67c.js	143.204.55.76	200 OK	1.6 MB
URL HTTP/1.1 trackshipment.endicia.com/static/js/main.d7c8f67c.js IP 143.204.55.76:0 ASN #16509 AMAZON-02 File type ASCII text, with very long lines (65465) Size 1.6 MB (1602517 bytes) Hash d653b6ce884041790b5a6e054e3cd5e4 79d4626c21832fc124329f8f6c328ab306cd8ff2 b83ba0630fe46c756a4e049ca652ce5f62b6d77b53dc8c78b89b120e5dde8cd1 HTTP Headers GET /static/js/main.d7c8f67c.js HTTP/1.1 Host: trackshipment.endicia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://trackshipment.endicia.com/?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&locale=en&postal_code=02898 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1602517 Connection: keep-alive Last-Modified: Thu, 10 Nov 2022 11:04:31 GMT Server: AmazonS3 Date: Mon, 06 Feb 2023 15:32:25 GMT Etag: "d653b6ce884041790b5a6e054e3cd5e4" Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront) X-Frame-Options: DENY X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Content-Security-Policy: style-src 'self' fonts.googleapis.com 'unsafe-inline'; script-src 'self'; font-src 'self' fonts.gstatic.com data:; img-src 'self' http: data:; connect-src .shipstation.com .shippingeasy.com .stamps.com .endicia.com .shipengine.com cdn.segment.com api.segment.io .ingest.sentry.io; manifest-src .shipstation.com .shippingeasy.com .stamps.com .endicia.com *.shipengine.com; script-src-elem cdn.segment.com 'self'; frame-ancestors http: Strict-Transport-Security: Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: iXRYCnileMlcPPLZ9m4rAKYvs3socP_Mcrh5_Az9rBi1aYf6wG5D_w==

	r3.o.lencr.org/	23.33.119.27	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 3b4ea902c3e097daaa31810cb66d585a 97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9347 Expires: Mon, 06 Feb 2023 18:08:12 GMT Date: Mon, 06 Feb 2023 15:32:25 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.33.119.27	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 3b4ea902c3e097daaa31810cb66d585a 97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9347 Expires: Mon, 06 Feb 2023 18:08:12 GMT Date: Mon, 06 Feb 2023 15:32:25 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.33.119.27	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 3b4ea902c3e097daaa31810cb66d585a 97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049 0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F" Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9347 Expires: Mon, 06 Feb 2023 18:08:12 GMT Date: Mon, 06 Feb 2023 15:32:25 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg	34.120.237.76	200 OK	9.8 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.8 kB (9808 bytes) Hash ccc8078cc937b7de0b299bcee1496f1b 395f04af71767acc9516387c8b07bde08968fdfe cf959fc4a72d80dcab20c235bec6d21eadaab87efa7a8969744cd228628ba050 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9808 x-amzn-requestid: 75cc8041-19f5-4994-96b6-b14d3c90ec6e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f4oiSFZAIAMF65g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e02141-355d272c345c8c37595b4bb2;Sampled=0 x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: T7YlRZ936VEDkBvo2YKrS3GbyEh1xzC8W-50KiODzFjTnQb-hvkKpw== via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google date: Sun, 05 Feb 2023 22:10:54 GMT age: 62491 etag: "395f04af71767acc9516387c8b07bde08968fdfe" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b3e78aa-f2de-4a48-82bf-952d0a22f875.jpeg	34.120.237.76	200 OK	12 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b3e78aa-f2de-4a48-82bf-952d0a22f875.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 12 kB (11481 bytes) Hash f0f48a44e1aece8d271028a7b0684cac 9f7247a3bb9248cd281c568ebba6e52b38b00149 0a34b5dc66f170403e79b2315a7cacef1703ce3777a20914525f86d46c0cd637 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b3e78aa-f2de-4a48-82bf-952d0a22f875.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 11481 x-amzn-requestid: b50de2d1-c23b-4908-8fc3-e84eea0382a4 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f4oiRFL-oAMFnSw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e02141-0254cda141886e0f39e8f8b3;Sampled=0 x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: KIJ6iTpVC0gVV6Q0dd_-ZTWkwm3q0vP52N3088Rd7O9pb8D39XfnBg== via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Sun, 05 Feb 2023 21:55:31 GMT age: 63414 etag: "9f7247a3bb9248cd281c568ebba6e52b38b00149" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg	34.120.237.76	200 OK	11 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 11 kB (10905 bytes) Hash 1a4eed23b240d04a3cd6b085cfa93375 f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00 93e8371f80c12d3753842e36001dbb8d3dc2223b10a594639752cd816c492d4e HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10905 x-amzn-requestid: 093778fc-231c-452f-a6fc-15f4eb41ade0 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: fmNJCEDzIAMFmxA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63d8c239-7f56d6e56392f373541db219;Sampled=0 x-amzn-remapped-date: Tue, 31 Jan 2023 07:24:41 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: gcy4nCriTOJhhTqFJBuks649uy0s4r3TVV3-yAcUhImLwqKpn1d2_w== via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google date: Sun, 05 Feb 2023 22:10:20 GMT age: 62525 etag: "f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b68c1a-7013-4183-b5b4-d006c6f9e7a7.jpeg	34.120.237.76	200 OK	11 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b68c1a-7013-4183-b5b4-d006c6f9e7a7.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 11 kB (10582 bytes) Hash 000cb25b2cb4fa30ce745582dafbab99 a5227f79e64bcab8d8f03822e6d408400a03a23e 7f6a2a99bff95672d34b41489d0dd1132ab8654b745e728e15ed95e987b7ed62 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0b68c1a-7013-4183-b5b4-d006c6f9e7a7.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10582 x-amzn-requestid: e18bacd8-6d0e-4957-93ab-97def7442f8c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f4okSFKKIAMFlUA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e0214e-05486d9b283cedc008cba781;Sampled=0 x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: p1ToWLG__PFWEMRxlPZcouvOTijPoUcMr7ubDCNcy2wMwgusbBjGPA== via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google date: Sun, 05 Feb 2023 22:13:34 GMT etag: "a5227f79e64bcab8d8f03822e6d408400a03a23e" content-type: image/jpeg age: 62331 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg	34.120.237.76	200 OK	10 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 10 kB (10514 bytes) Hash 9046d887fd45a0940e31a74173d17798 1ff698b9cf660165e846dfc4770f29852aedce45 0c7b0e1250aa7718b7b35b80a1442f62e94ace1fb578fb781ec8204ee96386d0 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10514 x-amzn-requestid: ac2a383b-833d-4dae-9bd9-43dc3d9e373d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: f4oiPEIyoAMFqUw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63e02141-436bb6816b269ce45b9f8600;Sampled=0 x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: RYNzle5-l5dOMPWb2Bmu_T5aIJw9NX2FKuJsej8hzpYZcgD6coH9SA== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Sun, 05 Feb 2023 21:50:09 GMT age: 63736 etag: "1ff698b9cf660165e846dfc4770f29852aedce45" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg	34.120.237.76	200 OK	9.8 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.8 kB (9779 bytes) Hash 352e4166a431e781e56cc7f169c7f8ca 866b76c34076cf2e18c6a071336fcf4f581f3c4d 75ba13b601f4b00c5b091eb29e7f6739ffee3e127bd6d3c4b35cc967bb6d354a HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9779 x-amzn-requestid: 101b984b-9c04-4d07-b1fe-3d888f4bcd49 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ftcNRFV_oAMF2_w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63dba721-72679ba0378015034e17b8ca;Sampled=0 x-amzn-remapped-date: Thu, 02 Feb 2023 12:05:53 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: FRZf4nkQyttwihy5BBbuHzT9lYQvBPqcOTdT5esu46vqMTvXAi5aQw== via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google date: Sun, 05 Feb 2023 21:57:24 GMT age: 63301 etag: "866b76c34076cf2e18c6a071336fcf4f581f3c4d" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	trackshipment.endicia.com/static/js/582.26d032d5.chunk.js	143.204.55.76	200 OK	4.5 kB
URL HTTP/1.1 trackshipment.endicia.com/static/js/582.26d032d5.chunk.js IP 143.204.55.76:0 ASN #16509 AMAZON-02 File type ASCII text, with very long lines (4502), with no line terminators Size 4.5 kB (4502 bytes) Hash 3ee4e3a85ff4533127d79c2e6ae5c439 f7e5e77e479b7d9923821e086fb3e69f90c4184d 59e36e6c2b66b2bbe20e6d40a74193a390ac23777fdf861894d925ee18cdcc21 HTTP Headers GET /static/js/582.26d032d5.chunk.js HTTP/1.1 Host: trackshipment.endicia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://trackshipment.endicia.com/?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&locale=en&postal_code=02898 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4502 Connection: keep-alive Last-Modified: Thu, 10 Nov 2022 11:04:31 GMT Server: AmazonS3 Date: Mon, 06 Feb 2023 15:32:26 GMT Etag: "3ee4e3a85ff4533127d79c2e6ae5c439" Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront) X-Frame-Options: DENY X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Content-Security-Policy: style-src 'self' fonts.googleapis.com 'unsafe-inline'; script-src 'self'; font-src 'self' fonts.gstatic.com data:; img-src 'self' http: data:; connect-src .shipstation.com .shippingeasy.com .stamps.com .endicia.com .shipengine.com cdn.segment.com api.segment.io .ingest.sentry.io; manifest-src .shipstation.com .shippingeasy.com .stamps.com .endicia.com *.shipengine.com; script-src-elem cdn.segment.com 'self'; frame-ancestors http: Strict-Transport-Security: Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: srLL2rv0hOwpZUC78xd0wefJF9GqF_2BqQf2ga4sXLKnmgVZJfuCUw==

	ocsp.sca1b.amazontrust.com/	143.204.42.165	200 OK	471 B
URL HTTP/1.1 ocsp.sca1b.amazontrust.com/ IP 143.204.42.165:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash d522d29881dc9c3947122f9eafd2c8ff 0405f78e3619f7b1ecb5949852c5c0f64ef37fbf 411d713788241edf37c9180220b6cfdfbc33c67ea1e1cc2049947046377d5ee8 HTTP Headers `POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=171966 Date: Mon, 06 Feb 2023 15:32:25 GMT Etag: "63e103ec-1d7" Expires: Wed, 08 Feb 2023 15:18:31 GMT Last-Modified: Mon, 06 Feb 2023 13:43:08 GMT Server: ECS (bsa/EB19) X-Cache: Miss from cloudfront Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: 7nEXbfJ-6VaLL9n-VFfy4p4DcaEyD43htKCoeS2C-RLPCBbl3EZlig== Age: 5723

	ocsp.sca1b.amazontrust.com/	143.204.42.165	200 OK	471 B
URL HTTP/1.1 ocsp.sca1b.amazontrust.com/ IP 143.204.42.165:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash d522d29881dc9c3947122f9eafd2c8ff 0405f78e3619f7b1ecb5949852c5c0f64ef37fbf 411d713788241edf37c9180220b6cfdfbc33c67ea1e1cc2049947046377d5ee8 HTTP Headers `POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Cache-Control: 'max-age=158059' Date: Mon, 06 Feb 2023 15:32:25 GMT Etag: "63dfb26e-1d7" Server: ECS (dcb/7F5E) X-Cache: Miss from cloudfront Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: yyMdfZtxmM0jdU5XctHI8J2Dt-kqGfiAmf1HzkWTGR-g9QrHY92a_w==`

	trackshipment.endicia.com/logo192.png	143.204.55.76	200 OK	5.3 kB
URL HTTP/1.1 trackshipment.endicia.com/logo192.png IP 143.204.55.76:0 ASN #16509 AMAZON-02 File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Size 5.3 kB (5300 bytes) Hash 3fadc976c2b1795e4c127f276c824766 b3251062686654f8052916c8f6a171e783d9065e 41a8415134a744658e0f3d25f9df9587ede2e73ce72f2bf834b9b97721174639 HTTP Headers GET /logo192.png HTTP/1.1 Host: trackshipment.endicia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://trackshipment.endicia.com/?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&locale=en&postal_code=02898 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5300 Connection: keep-alive Last-Modified: Thu, 10 Nov 2022 11:04:31 GMT Server: AmazonS3 Date: Mon, 06 Feb 2023 15:32:26 GMT Etag: "3fadc976c2b1795e4c127f276c824766" Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront) X-Frame-Options: DENY X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Content-Security-Policy: style-src 'self' fonts.googleapis.com 'unsafe-inline'; script-src 'self'; font-src 'self' fonts.gstatic.com data:; img-src 'self' http: data:; connect-src .shipstation.com .shippingeasy.com .stamps.com .endicia.com .shipengine.com cdn.segment.com api.segment.io .ingest.sentry.io; manifest-src .shipstation.com .shippingeasy.com .stamps.com .endicia.com *.shipengine.com; script-src-elem cdn.segment.com 'self'; frame-ancestors http: Strict-Transport-Security: Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: M1AkJ0jJYGOP8bqkhsuS46LUDhqkRDjrqf9GTyw89DeCEyMQCBtiLw==

	trackshipment.endicia.com/favicon.ico	143.204.55.76	200 OK	1.3 kB
URL HTTP/1.1 trackshipment.endicia.com/favicon.ico IP 143.204.55.76:0 ASN #16509 AMAZON-02 File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data Size 1.3 kB (1311 bytes) Hash 79c9e74b54ff695012914c5685830925 bcf211b9d5c03e492b42e794c6cc897dca5870a5 11d8e13bd15805e7bd31ba087604f835952b0465edf7bdb78b71098b7e67fffe HTTP Headers GET /favicon.ico HTTP/1.1 Host: trackshipment.endicia.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://trackshipment.endicia.com/?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&locale=en&postal_code=02898 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 1311 Connection: keep-alive Last-Modified: Thu, 10 Nov 2022 11:04:31 GMT Server: AmazonS3 Date: Mon, 06 Feb 2023 15:32:26 GMT Etag: "79c9e74b54ff695012914c5685830925" Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Frame-Options: DENY X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Content-Security-Policy: style-src 'self' fonts.googleapis.com 'unsafe-inline'; script-src 'self'; font-src 'self' fonts.gstatic.com data:; img-src 'self' http: data:; connect-src .shipstation.com .shippingeasy.com .stamps.com .endicia.com .shipengine.com cdn.segment.com api.segment.io .ingest.sentry.io; manifest-src .shipstation.com .shippingeasy.com .stamps.com .endicia.com *.shipengine.com; script-src-elem cdn.segment.com 'self'; frame-ancestors http: Strict-Transport-Security: Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: IXy2dCfq8bw_5Rhf-6LYGlYXb16ZHnMCOj6YoShvW3Q8gxewSfFvJw==

	api.trackship.shipengine.com/bt_resources/?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&postal_code=02898	143.204.55.18	200 OK	2.7 kB
URL HTTP/1.1 api.trackship.shipengine.com/bt_resources/?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&postal_code=02898 IP 143.204.55.18:0 ASN #16509 AMAZON-02 File type JSON data\012- , ASCII text, with very long lines (2702), with no line terminators Size 2.7 kB (2702 bytes) Hash 8071a7d1358ed36d5875f9669c10f482 017f149c3058adc3943e962b3f01fc9a69dd4023 d0800c2d0f1d5f060c83404caeeb7f253ba3af538f12c7551bff7607afd91b39 HTTP Headers GET /bt_resources/?branding_id=fdbc138b-5819-4818-960a-411d88cf3d58&carrier_code=ups&tracking_number=1ZY0E7790329496792&postal_code=02898 HTTP/1.1 Host: api.trackship.shipengine.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://trackshipment.endicia.com Connection: keep-alive Referer: https://trackshipment.endicia.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2702 Connection: keep-alive Date: Mon, 06 Feb 2023 15:32:25 GMT x-amzn-RequestId: 22f03bdf-b1a3-4777-95dd-2703b7fcaea1 Access-Control-Allow-Origin: * x-amz-apigw-id: f7GNjGK7oAMF4_Q= X-Amzn-Trace-Id: Root=1-63e11d89-0ffedbfd39e3573e3b97aecb;Sampled=0 Via: 1.1 1f0db25765b79d244ad1fa2184395c12.cloudfront.net (CloudFront), 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P2, OSL50-C1 X-Amz-Cf-Id: PzWL49RlThqWPUYEjz7toRgzL4-7euXUbcHnCleiFRJCOSeuG2doGQ==

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 836bc62dbb011b6180fc7209d0061736 74e6f18561a7006a3afb6ab03559eec239ce4b36 90b197384670fdb210d364f91b423fd383d25838e38a494158a8185bef0061f0 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 06 Feb 2023 15:32:25 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2	142.250.74.35	200 OK	16 kB
URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP 142.250.74.35:0 ASN #15169 GOOGLE File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Size 16 kB (15744 bytes) Hash 15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615 HTTP Headers `GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://trackshipment.endicia.com Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 15744 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Sun, 05 Feb 2023 22:02:00 GMT expires: Mon, 05 Feb 2024 22:02:00 GMT cache-control: public, max-age=31536000 age: 63026 last-modified: Wed, 11 May 2022 19:24:48 GMT content-type: font/woff2 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.pki.goog/gts1c3	142.250.74.131	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 142.250.74.131:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 0a8ea253ef61b5c330b3285f9a94e6ae 0cf9a1c66c83f505c7195774996b107c145f5884 8b6bca0cd9c9adcb16bba03349e8fcbfcd645719c82c95f0111095b731842402 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 06 Feb 2023 15:32:26 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	fonts.googleapis.com/css?family=Roboto\|Oswald\|Playfair+Display\|Montserrat	142.250.74.106	200 OK	4.0 kB
URL HTTP/2 fonts.googleapis.com/css?family=Roboto\|Oswald\|Playfair+Display\|Montserrat IP 142.250.74.106:0 ASN #15169 GOOGLE File type data Size 4.0 kB (3965 bytes) Hash bc87002fcabf88068d1bc3ca143c25e7 cc0cf379110ea50336b5c52a32dac9a7658fe394 8c139f3d28298917511d3177a00c1281589233d6c4e6ad911fda04a504bd39f1 HTTP Headers `GET /css?family=Roboto\|Oswald\|Playfair+Display\|Montserrat HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://trackshipment.endicia.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Mon, 06 Feb 2023 15:32:24 GMT date: Mon, 06 Feb 2023 15:32:24 GMT cache-control: private, max-age=86400 cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash d93582f18ee9f2c109fe9fdb3428fb9e 741fed2749a54b483d20b6cd1774b8115f50cf6e 3eead398da7ba323e1ef454662aace2764bf7363dba5dce7a07c0863970511e5 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 4009 Cache-Control: 'max-age=158059' Content-Type: application/ocsp-response Date: Mon, 06 Feb 2023 15:32:26 GMT Last-Modified: Mon, 06 Feb 2023 14:25:37 GMT Server: ECS (amb/6BC0) X-Cache: HIT Content-Length: 471`

	logos.shipstation.com/ipaas/carriers/ups/logo.svg	54.230.111.115	200 OK	2.1 kB
URL HTTP/2 logos.shipstation.com/ipaas/carriers/ups/logo.svg IP 54.230.111.115:0 ASN #16509 AMAZON-02 File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (452) Size 2.1 kB (2078 bytes) Hash 554e3598810717a5642dcf55569e42a5 854837a1840549201a438f1d2715132ac57e80ba b693baa6c64e4e1a868c7de351b63007f1089ccad448385f4cb4285ccd178e29 HTTP Headers `GET /ipaas/carriers/ups/logo.svg HTTP/1.1 Host: logos.shipstation.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://trackshipment.endicia.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK content-type: image/svg+xml content-length: 2078 date: Mon, 06 Feb 2023 05:40:12 GMT last-modified: Fri, 07 Aug 2020 18:46:23 GMT etag: "554e3598810717a5642dcf55569e42a5" x-amz-server-side-encryption: AES256 accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: vUuWuYa9cpNsIw0kyXqcNL_yLtODprra_f9KiwuSsnRODVuTMsjQKA== age: 35535 X-Firefox-Spdy: h2`

	api.trackship.shipengine.com//record-ui-event	143.204.55.18	200 OK	0 B
URL HTTP/1.1 api.trackship.shipengine.com//record-ui-event IP 143.204.55.18:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers OPTIONS //record-ui-event HTTP/1.1 Host: api.trackship.shipengine.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Referer: https://trackshipment.endicia.com/ Origin: https://trackshipment.endicia.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: keep-alive Date: Mon, 06 Feb 2023 15:32:26 GMT x-amzn-RequestId: b6ae39aa-b27b-4946-9d5d-f1594e125e70 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,X-Amz-User-Agent x-amz-apigw-id: f7GNoE7ToAMF_2Q= Access-Control-Allow-Methods: OPTIONS,POST Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront), 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: OSL50-C1, OSL50-C1 X-Amz-Cf-Id: TXz9cFLtCrsZ4KULy-vU9d9WTu5nHCW8MBUs66tGD6Ve-ZTEyW-ytg==

	ocsp.sca1b.amazontrust.com/	143.204.42.165	200 OK	471 B
URL HTTP/1.1 ocsp.sca1b.amazontrust.com/ IP 143.204.42.165:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 7841649e862a14c3674be7a0059d27db 0d03b063470a77e00f4910b0fd03f9911f426c18 6aee3c48e811a75e187d7af969c72f112bd956588e420d381a35a3f141e39787 HTTP Headers `POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=144508 Date: Mon, 06 Feb 2023 15:32:26 GMT Etag: "63e09fec-1d7" Expires: Wed, 08 Feb 2023 07:40:54 GMT Last-Modified: Mon, 06 Feb 2023 06:36:28 GMT Server: ECS (dcb/7F7F) X-Cache: Miss from cloudfront Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: bIbnOTcpe8HGMmMxrZ_17EZKo1-0Po54yfU-oCWilpG7pgnCJ5PzbA== Age: 3866

	resources.stamps.com/logos/logo_main_endicia.png	54.230.111.84	200 OK	24 kB
URL HTTP/2 resources.stamps.com/logos/logo_main_endicia.png IP 54.230.111.84:0 ASN #16509 AMAZON-02 File type PNG image data, 990 x 288, 8-bit/color RGBA, non-interlaced\012- data Size 24 kB (24191 bytes) Hash c567c3b5f5dee459bc076c7fc0b8d752 2176d7cd2b494d68d4ee2331a195cccf9066e8d4 5c5b9cfe6aea0e5d1f3c39e0e786655229e5a347864e431eabf3b4c173a0bc8c HTTP Headers `GET /logos/logo_main_endicia.png HTTP/1.1 Host: resources.stamps.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://trackshipment.endicia.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: image/png content-length: 24191 last-modified: Mon, 21 Sep 2020 23:23:38 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Uep2_7bGYIXi2.lklsGTK9vSZ9nj7GCj accept-ranges: bytes server: AmazonS3 date: Mon, 06 Feb 2023 10:02:32 GMT etag: "c567c3b5f5dee459bc076c7fc0b8d752" x-cache: Hit from cloudfront via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: ZuV8uvN36wcF00HGJWvSFda3lcpDqcgzIQkW8ZDuXNzH5VSJ0FPfsw== age: 19795 x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN referrer-policy: strict-origin content-security-policy: upgrade-insecure-requests x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains content-security-policy-report-only: default-src 'self' permissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(self), payment=() x-wpe-vary: Accept-Encoding X-Firefox-Spdy: h2

	api.trackship.shipengine.com//record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58	143.204.55.18	200 OK	0 B
URL HTTP/1.1 api.trackship.shipengine.com//record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58 IP 143.204.55.18:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers OPTIONS //record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58 HTTP/1.1 Host: api.trackship.shipengine.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Referer: https://trackshipment.endicia.com/ Origin: https://trackshipment.endicia.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: keep-alive Date: Mon, 06 Feb 2023 15:32:26 GMT x-amzn-RequestId: 12e7f211-5e76-4954-aed0-c06822bccaf7 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,X-Amz-User-Agent x-amz-apigw-id: f7GNpFkrIAMF5MQ= Access-Control-Allow-Methods: OPTIONS,POST Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront), 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: OSL50-C1, OSL50-C1 X-Amz-Cf-Id: FbQL5UzsL_LuDQ402xXv6wVYEyBTSJyqXFuWI6g4mD37iE9UDLHLQg==

	api.trackship.shipengine.com//record-ui-event	143.204.55.18	200 OK	0 B
URL HTTP/1.1 api.trackship.shipengine.com//record-ui-event IP 143.204.55.18:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers OPTIONS //record-ui-event HTTP/1.1 Host: api.trackship.shipengine.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Referer: https://trackshipment.endicia.com/ Origin: https://trackshipment.endicia.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: keep-alive Date: Mon, 06 Feb 2023 15:32:26 GMT x-amzn-RequestId: fa13bff3-84c5-4855-adcb-1440afcfd113 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,X-Amz-User-Agent x-amz-apigw-id: f7GNqHogIAMF-pg= Access-Control-Allow-Methods: OPTIONS,POST Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront), 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: OSL50-C1, OSL50-C1 X-Amz-Cf-Id: -hlYfuTUvf5Rxn4b59Jyxx-fZy60jMSsxRsaIKIxhMC4AfH-0KKsLA==

	api.trackship.shipengine.com//record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58	143.204.55.18	200 OK	0 B
URL HTTP/1.1 api.trackship.shipengine.com//record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58 IP 143.204.55.18:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers OPTIONS //record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58 HTTP/1.1 Host: api.trackship.shipengine.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Referer: https://trackshipment.endicia.com/ Origin: https://trackshipment.endicia.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: keep-alive Date: Mon, 06 Feb 2023 15:32:26 GMT x-amzn-RequestId: e44c75e6-3e37-4817-9d14-fa080ef5988f Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,X-Amz-User-Agent x-amz-apigw-id: f7GNqEK4IAMFS6g= Access-Control-Allow-Methods: OPTIONS,POST Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront), 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: OSL50-C1, OSL50-C1 X-Amz-Cf-Id: 34hfDRW6UT52eZ6L2FJ7p0TA-0SjkSjhRfci3zskoeHXVuceEBYwoA==

	api.trackship.shipengine.com//record-ui-event	143.204.55.18	201 Created	2 B
URL HTTP/1.1 api.trackship.shipengine.com//record-ui-event IP 143.204.55.18:0 ASN #16509 AMAZON-02 File type JSON data\012- , ASCII text, with no line terminators Size 2 B (2 bytes) Hash 99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a HTTP Headers POST //record-ui-event HTTP/1.1 Host: api.trackship.shipengine.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json;charset=utf-8 Content-Length: 103 Origin: https://trackshipment.endicia.com Connection: keep-alive Referer: https://trackshipment.endicia.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/1.1 201 Created Content-Type: application/json Content-Length: 2 Connection: keep-alive Date: Mon, 06 Feb 2023 15:32:26 GMT x-amzn-RequestId: 1c47e275-89c5-493d-904c-fb2a64967955 Access-Control-Allow-Origin: * x-amz-apigw-id: f7GNrFCeoAMFaOA= X-Amzn-Trace-Id: Root=1-63e11d8a-5e7962e7509dab097385c264;Sampled=0 Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront), 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: OSL50-C1, OSL50-C1 X-Amz-Cf-Id: alsOwORfB3KH4aFubjdsRNNmtgkBfxFNbL8mxwlQtHdCwgJBCxQ87w==

	api.trackship.shipengine.com//record-ui-event	143.204.55.18	201 Created	2 B
URL HTTP/1.1 api.trackship.shipengine.com//record-ui-event IP 143.204.55.18:0 ASN #16509 AMAZON-02 File type JSON data\012- , ASCII text, with no line terminators Size 2 B (2 bytes) Hash 99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a HTTP Headers POST //record-ui-event HTTP/1.1 Host: api.trackship.shipengine.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json;charset=utf-8 Content-Length: 103 Origin: https://trackshipment.endicia.com Connection: keep-alive Referer: https://trackshipment.endicia.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/1.1 201 Created Content-Type: application/json Content-Length: 2 Connection: keep-alive Date: Mon, 06 Feb 2023 15:32:26 GMT x-amzn-RequestId: 585c3c35-6854-408e-90f5-2fb6466fefd3 Access-Control-Allow-Origin: * x-amz-apigw-id: f7GNrEOGIAMFolA= X-Amzn-Trace-Id: Root=1-63e11d8a-0549a07770c89e5d0f3cff03;Sampled=0 Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront), 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: OSL50-C1, OSL50-C1 X-Amz-Cf-Id: ZwumEJfFPNqY-06VS-0oh2QlKtrhiRor-YUYd8xtFB93mCIc_x6dOA==

	api.trackship.shipengine.com//record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58	143.204.55.18	201 Created	0 B
URL HTTP/1.1 api.trackship.shipengine.com//record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58 IP 143.204.55.18:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST //record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58 HTTP/1.1 Host: api.trackship.shipengine.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json;charset=utf-8 Content-Length: 133 Origin: https://trackshipment.endicia.com Connection: keep-alive Referer: https://trackshipment.endicia.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/1.1 201 Created Content-Type: application/json Content-Length: 0 Connection: keep-alive Date: Mon, 06 Feb 2023 15:32:26 GMT x-amzn-RequestId: 19a27a8d-d41c-4eac-9b07-14217d148582 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type x-amz-apigw-id: f7GNsEeJoAMFrfg= Access-Control-Allow-Methods: OPTIONS,POST,GET X-Amzn-Trace-Id: Root=1-63e11d8a-6b693b1f11acbd0f6e371dce;Sampled=0 Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront), 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: OSL50-C1, OSL50-C1 X-Amz-Cf-Id: -d3Hmt7Ctp73P-ovV3JadlJYk4WogxLgJRyri3XLudOFhfB0Md-SAw==

	api.trackship.shipengine.com//record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58	143.204.55.18	201 Created	0 B
URL HTTP/1.1 api.trackship.shipengine.com//record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58 IP 143.204.55.18:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST //record-analytics-event/8316440/fdbc138b-5819-4818-960a-411d88cf3d58 HTTP/1.1 Host: api.trackship.shipengine.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json;charset=utf-8 Content-Length: 133 Origin: https://trackshipment.endicia.com Connection: keep-alive Referer: https://trackshipment.endicia.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/1.1 201 Created Content-Type: application/json Content-Length: 0 Connection: keep-alive Date: Mon, 06 Feb 2023 15:32:26 GMT x-amzn-RequestId: 244d1560-f5b8-424e-8767-2a0422a1f46e Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type x-amz-apigw-id: f7GNtHpzoAMF5XA= Access-Control-Allow-Methods: OPTIONS,POST,GET X-Amzn-Trace-Id: Root=1-63e11d8a-0dd01f3a1e58fbdf055d4369;Sampled=0 Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront), 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront) X-Cache: Miss from cloudfront X-Amz-Cf-Pop: OSL50-C1, OSL50-C1 X-Amz-Cf-Id: p87oxcP8pofTkzhms4-hm5bfSBNVpWCyzHr08NhVyduL8Lox5dlXEg==

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (49)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type