urlquery - report: bitbucket.org/aneex/warzone_2.0_unlock_tool_aim_esp/downloads/Warzone_2.0_Unlock_tool_Aim

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	Sent bytes	Received bytes	IP
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-25T18:14:26Z	782	2374	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-26T05:11:12Z	413	5894	34.160.144.191
bitbucket.org (1)	13657	2012-05-21T19:07:59Z	2023-03-17T07:29:03Z	526	3060	104.192.141.1
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-26T05:11:59Z	333	391	34.117.237.239
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-26T05:10:29Z	606	127	35.162.92.33
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-22T01:36:00Z	2023-03-26T05:09:08Z	3246	52824	34.120.237.76
r3.o.lencr.org (6)	344	2020-12-02T09:52:13Z	2023-03-25T18:12:03Z	2028	5320	23.36.76.226
ocsp.sca1b.amazontrust.com (1)	1015	2017-03-03T16:20:51Z	2019-03-27T05:05:54Z	350	1006	54.230.245.118
bbuseruploads.s3.amazonaws.com (1)	419617	2014-05-24T17:44:20Z	2023-03-25T05:37:58Z	1175	37587233	52.216.208.113

Scan Date	Severity	Indicator	Comment
2023-03-16	medium	bitbucket.org/aneex/warzone_2.0_unlock_tool_aim_esp/downloads/Warzone_2.0_U (...)	Malware

Date	UQ / IDS / BL	URL	IP
2023-06-09 02:08:06 UTC	0 - 0 - 1	bitbucket.org/f32f23ff23f23/opseeecboi/raw/4d (...)	104.192.141.1
2023-06-09 02:08:08 UTC	0 - 0 - 1	bitbucket.org/f32f23ff23f23/imanopsecgod/raw/ (...)	104.192.141.1
2023-06-09 02:07:56 UTC	0 - 0 - 1	bitbucket.org/f32f23ff23f23/opseeecboi/raw/ec (...)	104.192.141.1
2023-06-09 02:04:06 UTC	0 - 0 - 1	bitbucket.org/thisisaworkspace/privateonlydon (...)	104.192.141.1
2023-06-09 02:04:04 UTC	0 - 0 - 1	bitbucket.org/thisisaworkspace/94f8j3984fj934 (...)	104.192.141.1

Date	UQ / IDS / BL	URL	IP
2023-06-09 05:27:27 UTC	0 - 0 - 1	bigtradeking-bestguidetoyoursuccess.s3.amazon (...)	52.216.165.163
2023-06-09 05:27:03 UTC	4 - 0 - 0	crm.ccpa-accp.ca/ecommunication/api/click/O1n (...)	35.183.79.157
2023-06-09 05:26:26 UTC	0 - 0 - 3	exeupp.com/8y0/new_invoice.exe/	3.140.13.188
2023-06-09 05:25:02 UTC	0 - 0 - 2	exeupp.com/8P0/server.exe?download_token=5720 (...)	18.119.154.66
2023-06-09 05:25:02 UTC	0 - 0 - 2	exeupp.com/8P0/server.exe?download_token=9c9a (...)	3.140.13.188

Date	UQ / IDS / BL	URL	IP
2023-06-09 02:08:06 UTC	0 - 0 - 1	bitbucket.org/f32f23ff23f23/opseeecboi/raw/4d (...)	104.192.141.1
2023-06-09 02:08:08 UTC	0 - 0 - 1	bitbucket.org/f32f23ff23f23/imanopsecgod/raw/ (...)	104.192.141.1
2023-06-09 02:07:56 UTC	0 - 0 - 1	bitbucket.org/f32f23ff23f23/opseeecboi/raw/ec (...)	104.192.141.1
2023-06-09 02:04:06 UTC	0 - 0 - 1	bitbucket.org/thisisaworkspace/privateonlydon (...)	104.192.141.1
2023-06-09 02:04:04 UTC	0 - 0 - 1	bitbucket.org/thisisaworkspace/94f8j3984fj934 (...)	104.192.141.1

Date	UQ / IDS / BL	URL	IP
2023-04-04 20:34:34 UTC	0 - 2 - 0	static.dl.mail.ru/WarRobotsRuLoader.exe	188.93.63.180
2023-04-04 14:03:05 UTC	0 - 1 - 0	mirrors.xmission.com/kodi/releases/windows/wi (...)	198.60.22.13
2023-04-04 13:58:57 UTC	0 - 1 - 0	mirror.csclub.uwaterloo.ca/kde/Attic/release- (...)	129.97.134.71
2023-04-04 11:16:23 UTC	0 - 2 - 0	static.dl.mail.ru/WarfaceLoader.exe	188.93.63.180
2023-04-04 10:46:29 UTC	0 - 2 - 0	static.dl.mail.ru/AztLoader.exe	188.93.63.180

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "8ECD890BD13E92A07ACABBD187E71D59ADC1F896B249AC1165444EA1F9E21BEF" Last-Modified: Tue, 14 Mar 2023 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10043 Expires: Thu, 16 Mar 2023 04:32:41 GMT Date: Thu, 16 Mar 2023 01:45:18 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 25389646a2daae58c728e01095973033 Sha1: 651619a503a0f21dd5a8135cce5240f51bae1ab5 Sha256: 8ecd890bd13e92a07acabbd187e71d59adc1f896b249ac1165444ea1f9e21bef
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "70B5BB76774526A0CF131445AE2F8639085C3449812497DF457F4BC78089917B" Last-Modified: Wed, 15 Mar 2023 02:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10882 Expires: Thu, 16 Mar 2023 04:46:40 GMT Date: Thu, 16 Mar 2023 01:45:18 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1424d2734290cfd767b86da0ee0da3bc Sha1: 875b1243bca41177411ac6af710d2bb96f45a0ac Sha256: 70b5bb76774526a0cf131445ae2f8639085c3449812497df457f4bc78089917b
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Backoff, Alert, Content-Length, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Thu, 16 Mar 2023 01:14:21 GMT age: 1857 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 84db75194692d4afe13196bda6f22da8 Sha1: 4c1f49bc973a4917f146d93c8d598344edc021f6 Sha256: a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "D64A58D2F2BCA32CB33F6FB8581978238FFA9919A3B2FFB4CE056A57FB7C9917" Last-Modified: Wed, 15 Mar 2023 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14255 Expires: Thu, 16 Mar 2023 05:42:53 GMT Date: Thu, 16 Mar 2023 01:45:18 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 003080c91d03081096b019a53f63a8e9 Sha1: b3d742e037ae313261033338d05d8155f1bf7e6b Sha256: d64a58d2f2bca32cb33f6fb8581978238ffa9919a3b2ffb4ce056a57fb7c9917
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: wrjjJVC75sDjo/y2kfaC9GgilX3xW8E0YyDBqYPIudOmXQ8xxZPy20gOYvlInbOChYDiq3qJmQ6W2zgy2VxhpA== x-amz-request-id: YJFVGGK9R7Y1EBJV x-amz-server-side-encryption: AES256 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Thu, 16 Mar 2023 01:23:00 GMT age: 1338 last-modified: Sat, 18 Feb 2023 20:28:27 GMT etag: "b5ba6334e73496995e3e3a9ecd0eb323" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: b5ba6334e73496995e3e3a9ecd0eb323 Sha1: ad80d3b7718c28364e8c2004fb38a13a1747e462 Sha256: aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /aneex/warzone_2.0_unlock_tool_aim_esp/downloads/Warzone_2.0_Unlock_tool_Aim_ESP.rar HTTP/1.1 Host: bitbucket.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	104.192.141.1 HTTP/2 302 Found content-type: text/html; charset=utf-8 content-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: ; base-uri 'self'; style-src 'self' 'unsafe-inline' https://aui-cdn.atlassian.com https://d301sr5gafysq2.cloudfront.net https://d136azpfpnge1l.cloudfront.net; connect-src bitbucket.org .bitbucket.org bb-inf.net .bb-inf.net id.atlassian.com api.atlassian.com wss://bitbucketci-ws-service.services.atlassian.com analytics.atlassian.com as.atlassian.com api-private.stg.atlassian.com api-private.atlassian.com atl-global.atlassian.com cofs.staging.public.atl-paas.net cofs.prod.public.atl-paas.net intake.opbeat.com api.media.atlassian.com api.segment.io xid.statuspage.io xid.atlassian.com xid.sourcetreeapp.com bam.nr-data.net bam-cell.nr-data.net www.google-analytics.com stats.g.doubleclick.net sentry.io .ingest.sentry.io events.launchdarkly.com app.launchdarkly.com bqlf8qjztdtr.statuspage.io https://d301sr5gafysq2.cloudfront.net https://d136azpfpnge1l.cloudfront.net; frame-ancestors 'self' start.atlassian.com start.stg.atlassian.com atlaskit.atlassian.com; object-src 'none'; script-src 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' http: https: https://d301sr5gafysq2.cloudfront.net https://d136azpfpnge1l.cloudfront.net; report-uri https://web-security-reports.services.atlassian.com/csp-report/bb-website server: envoy x-usage-quota-remaining: 999200.915 vary: Accept-Language, Origin x-usage-request-cost: 815.57 cache-control: max-age=0, no-cache, no-store, must-revalidate x-b3-traceid: 211ebe48edb476e2 x-usage-output-ops: 0 x-used-mesh: False x-dc-location: Micros-3 strict-transport-security: max-age=31536000; includeSubDomains; preload date: Thu, 16 Mar 2023 01:45:18 GMT x-usage-user-time: 0.024467 x-usage-system-time: 0.000000 location: https://bbuseruploads.s3.amazonaws.com/1fec2273-ddf6-4b5e-99b8-aaf452254701/downloads/dd02a440-8a48-4585-a3d4-f2ae942bd3f5/Warzone_2.0_Unlock_tool_Aim_ESP.rar?response-content-disposition=attachment%3B%20filename%3D%22Warzone_2.0_Unlock_tool_Aim_ESP.rar%22&AWSAccessKeyId=ASIA6KOSE3BNKVRQYT6L&Signature=dtymAR5o3JIkA%2B0p9ycHRzDfFAs%3D&x-amz-security-token=FwoGZXIvYXdzEFMaDAz515gCfF4ditPXYiK%2BAZNjdAED8z0%2F0X3qbjBPThLvVobKbLOKEnjqW1asPUwRzUQiab7w3ZtbstMRiC%2B77SJ4fq2EvmS9hH8N0sPVD87s3s4sZRTq9d4OnFfupSVuhVSyo249sxE7H0btMzQQCGCewVhOorxfKEvrrI7xixJMSWQNfJTbbtjRt8L8eDZj9dhqKcJ78jlKWH4S9V4MbQcTDX9xJeRqu7QMMuAVN89kBA5QmeYoTAFcT7%2FhUipw49qW3SA7Ib6DDlMTLGoo%2BebJoAYyLfhhHWwO3cQg5tmbhYwcRB4AU5kxcWOiygVHu1YKlPukA6jZGENIYOJrzuDJ3g%3D%3D&Expires=1678932609 expires: Thu, 16 Mar 2023 01:45:18 GMT x-served-by: 2c132ce26fc0 x-envoy-upstream-service-time: 68 content-language: en x-view-name: bitbucket.apps.downloads.views.download_file x-static-version: 953f19b09c35 x-render-time: 0.05701756477355957 x-usage-input-ops: 0 x-frame-options: SAMEORIGIN x-version: 953f19b09c35 x-request-count: 2029 x-cache-info: not cacheable; response specified "Cache-Control: no-cache" content-length: 0 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Blocklists: - fortinet: Malware
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Thu, 16 Mar 2023 01:45:18 GMT content-length: 12 access-control-expose-headers: content-type vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	54.230.245.118 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=132611 Date: Thu, 16 Mar 2023 01:45:18 GMT Etag: "6411becb-1d7" Expires: Fri, 17 Mar 2023 14:35:29 GMT Last-Modified: Wed, 15 Mar 2023 12:49:15 GMT Server: ECAcc (nya/7946) X-Cache: Miss from cloudfront Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: dzOryeT7S19Cv7Vx9KXVQKIe2JpH8dgPrs3s2DEJh1bUZ20fkHC6ZQ== Age: 6374 --- Additional Info --- Magic: data Size: 471 Md5: 4f8a7a851dd40597993b95120406967f Sha1: 61658021d78b32c1f219e7e129583dc745ab3927 Sha256: ec4d5886942a366b1fa03b04b9eea698565f58001928616d928553cb1c2a24f4
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Last-Modified, Retry-After, ETag, Backoff, Expires, Alert, Pragma, Cache-Control, Content-Length, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Thu, 16 Mar 2023 01:14:31 GMT age: 1848 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F23A16DCFFF2A742FCBD5FFF52CB6EDCB9485EEA5E732574F3124371B21ABFB3" Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12046 Expires: Thu, 16 Mar 2023 05:06:05 GMT Date: Thu, 16 Mar 2023 01:45:19 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4353e40dea39897876467013220ab1ad Sha1: ecdbe764620d0d760f9333ff2c30d0f7d9b5d9a8 Sha256: f23a16dcfff2a742fcbd5fff52cb6edcb9485eea5e732574f3124371b21abfb3
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: itSuZBv3dsRDKK1o0hf7Pg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	35.162.92.33 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: VZc4FRUk0qaDBKfA6jlY72Wp3Q8= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783" Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6519 Expires: Thu, 16 Mar 2023 03:33:59 GMT Date: Thu, 16 Mar 2023 01:45:20 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8bd8586a0a52f516ac521f2a3752b049 Sha1: 3cfd233164ae5350f2fb61250641b70e788cf58a Sha256: 8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783" Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6519 Expires: Thu, 16 Mar 2023 03:33:59 GMT Date: Thu, 16 Mar 2023 01:45:20 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 8bd8586a0a52f516ac521f2a3752b049 Sha1: 3cfd233164ae5350f2fb61250641b70e788cf58a Sha256: 8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e568a08-09df-45c2-8600-c4fa5773c576.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6059 x-amzn-requestid: 425c09db-1d41-44cf-8694-340a0bdfbf07 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: B14HJE-0oAMFUCw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64123a2d-7ddf1b5108b9392147f4b1f6;Sampled=0 x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:41 GMT x-amz-cf-pop: HIO50-C1, SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: Mi4e-K1L0vNBlf3wF0j3teRn0HHeGxd1ci01AUqt9r_n3Aa_tYcgdw== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 google date: Wed, 15 Mar 2023 21:36:11 GMT age: 14949 etag: "2731f86c30cf1a97d613f1a1ee89fb21eeed5274" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6059 Md5: 7db5360adcad1b292bb24ac8318adf25 Sha1: 2731f86c30cf1a97d613f1a1ee89fb21eeed5274 Sha256: 8af3ee325cf059519a437595fa85226d13bd507ecb97ed7b786e53074ebab364
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1fd984e9-181b-433d-bc47-ee8be462633c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8678 x-amzn-requestid: dd385283-ed6a-4990-b1a9-394d3d7d9266 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: B14BcF7dIAMFiJw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64123a08-4cac59d93456884026a91385;Sampled=0 x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:04 GMT x-amz-cf-pop: HIO50-C1, SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: TuHacm9QGqDi5Uvrzys8yBF0O7WL7i2w37E1Un09bbEHX97x-EbASA== via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google date: Wed, 15 Mar 2023 21:47:58 GMT age: 14242 etag: "ca999978ec48eca0fb99aacd599cdac22e67d98c" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8678 Md5: c40dbfe92d5c6f21255b3e8da1945cf7 Sha1: ca999978ec48eca0fb99aacd599cdac22e67d98c Sha256: f749d82d554ebe78ff69f90176f029f6db9881990e22eaa6afbf51f8d81ac947
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8487 x-amzn-requestid: 92381f1a-0140-47e9-a971-594a7de36c3c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: BkEcBGizoAMFgOA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-640b1ab3-1a54b65a5d7083e62dcb85ab;Sampled=0 x-amzn-remapped-date: Fri, 10 Mar 2023 11:55:31 GMT x-amz-cf-pop: SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: w_13YsBBteASlPvTrgLhnI-QiuUjEcR9q-bADLbCRl6B-uwcPS3TQA== via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 c5c7edc18be1805f007e0576da02e554.cloudfront.net (CloudFront), 1.1 google date: Thu, 16 Mar 2023 01:37:00 GMT age: 500 etag: "79c7d22c8df6d305f46c5779ccb9f25169d4d111" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8487 Md5: be71491cee9b47dc3ffb23b4fdff25b3 Sha1: 79c7d22c8df6d305f46c5779ccb9f25169d4d111 Sha256: e785896e5840fb901ddd0118bef3ccad6b59a96d8eef0e8ccd9c95a3c261ba45
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04285abf-0522-44d5-a610-dbdc572f8fe2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6454 x-amzn-requestid: 75db4751-34af-4af4-9233-4bd44b3a78c5 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: B14BnEUiIAMFw2A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64123a0a-5c0c24470a9e35e564d243ca;Sampled=0 x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:06 GMT x-amz-cf-pop: HIO50-C1, SEA19-C3 x-cache: Miss from cloudfront x-amz-cf-id: qtypC9EvYuK_evQLVpMrv3J8RA0Ym7D4PKp4b7FsKOftt1M-UiDYJQ== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9825a45e2b387a61504c0c3df20048ee.cloudfront.net (CloudFront), 1.1 google date: Wed, 15 Mar 2023 21:35:06 GMT age: 15014 etag: "d71287bc6c7e50bd37ee73c6c61a005b1fe668e3" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6454 Md5: d5eecb38b600f3ae033932d71741b6d0 Sha1: d71287bc6c7e50bd37ee73c6c61a005b1fe668e3 Sha256: 09df757cd6681e511c8d83e8e2a0fdd3b19b2b8f3823e57541d7838df2f3371e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdad4172a-505a-4014-9bcf-f13aa53b1686.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8758 x-amzn-requestid: 7c07a43a-3a52-4bea-8ff0-f2e0247c680d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: B14rgEQfIAMF2Qg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64123b16-5f46de1a5896bb08271f930d;Sampled=0 x-amzn-remapped-date: Wed, 15 Mar 2023 21:39:34 GMT x-amz-cf-pop: HIO50-C1, SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: 3zxt_zNW_W4xw7Fsqylm6dkjtVBFZDaI6FLSe5f541G1xgNcKrloaQ== via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google date: Wed, 15 Mar 2023 21:48:12 GMT age: 14228 etag: "d56d45d301ddd803f7d9e69dee60694cb9cbc598" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8758 Md5: 8154be92a2d44a0162f1cc673921529f Sha1: d56d45d301ddd803f7d9e69dee60694cb9cbc598 Sha256: 1ce79bc57af6f1b848992c86f300589070ed7343f8ac9cf1911e9f53f1278dcb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28ea495a-9a14-4b7a-bf29-31b4af0b1307.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8021 x-amzn-requestid: 6f86f843-812c-4f7c-ad2d-d41c0405a6b6 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: B14DnFY2IAMF7XA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64123a16-0da03a2e2a479bce16f2b7c3;Sampled=0 x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:18 GMT x-amz-cf-pop: HIO50-C1, SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: ffwG3zrDUifHiQfL3eIjtPWGMJpNippphnVFcLB9E_C8oPh0Aqbwiw== via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 3f3347264bcaae7af741e2a2f692c6a0.cloudfront.net (CloudFront), 1.1 google date: Wed, 15 Mar 2023 21:48:11 GMT age: 14229 etag: "6cb9cd6a44e0036dc7e30ab67c57ba6a9c500c4b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8021 Md5: 6a9438432e2551c19eff442623db83fe Sha1: 6cb9cd6a44e0036dc7e30ab67c57ba6a9c500c4b Sha256: cc41500c7ff86eae7b3fc552bce4844fe7b0eed0266cd27340d4c5ccf1f91026
GET /1fec2273-ddf6-4b5e-99b8-aaf452254701/downloads/dd02a440-8a48-4585-a3d4-f2ae942bd3f5/Warzone_2.0_Unlock_tool_Aim_ESP.rar?response-content-disposition=attachment%3B%20filename%3D%22Warzone_2.0_Unlock_tool_Aim_ESP.rar%22&AWSAccessKeyId=ASIA6KOSE3BNKVRQYT6L&Signature=dtymAR5o3JIkA%2B0p9ycHRzDfFAs%3D&x-amz-security-token=FwoGZXIvYXdzEFMaDAz515gCfF4ditPXYiK%2BAZNjdAED8z0%2F0X3qbjBPThLvVobKbLOKEnjqW1asPUwRzUQiab7w3ZtbstMRiC%2B77SJ4fq2EvmS9hH8N0sPVD87s3s4sZRTq9d4OnFfupSVuhVSyo249sxE7H0btMzQQCGCewVhOorxfKEvrrI7xixJMSWQNfJTbbtjRt8L8eDZj9dhqKcJ78jlKWH4S9V4MbQcTDX9xJeRqu7QMMuAVN89kBA5QmeYoTAFcT7%2FhUipw49qW3SA7Ib6DDlMTLGoo%2BebJoAYyLfhhHWwO3cQg5tmbhYwcRB4AU5kxcWOiygVHu1YKlPukA6jZGENIYOJrzuDJ3g%3D%3D&Expires=1678932609 HTTP/1.1 Host: bbuseruploads.s3.amazonaws.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	52.216.208.113 HTTP/1.1 200 OK Content-Type: application/octet-stream x-amz-id-2: osMcBWg4C8HGkl523Q0XWC8bnmMHDdemYPlbN42m7IgmidMSUO8WTZTFXm+ZSuN7jMpWSEz/ao8= x-amz-request-id: QCY8CM07AJ9XA43A Date: Thu, 16 Mar 2023 01:45:20 GMT Last-Modified: Mon, 28 Nov 2022 15:00:42 GMT ETag: "224a1daa3cf46b3fde9996113e60e2d5-5" x-amz-server-side-encryption: AES256 x-amz-version-id: yhlgjw9W_E0hXmuer5zoUA5fnM0oukU4 Content-Disposition: attachment; filename="Warzone_2.0_Unlock_tool_Aim_ESP.rar" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 37586686 --- Additional Info --- Magic: RAR archive data, v5\012- data Size: 37586686 Md5: 26a2f4bf1f7b460fe319627ddb12dad4 Sha1: 27a6632b6c080e5b410c691c5a41d18c91db47a0 Sha256: 050ca4341ee81ff98efc88a03a82a2e41b63377be68464a1e170be393b15ce2f

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "8ECD890BD13E92A07ACABBD187E71D59ADC1F896B249AC1165444EA1F9E21BEF" 

                                            
                                                
Last-Modified: Tue, 14 Mar 2023 18:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=10043 

                                            
                                                
Expires: Thu, 16 Mar 2023 04:32:41 GMT 

                                            
                                                
Date: Thu, 16 Mar 2023 01:45:18 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    25389646a2daae58c728e01095973033

                                                Sha1:   651619a503a0f21dd5a8135cce5240f51bae1ab5

                                                Sha256: 8ecd890bd13e92a07acabbd187e71d59adc1f896b249ac1165444ea1f9e21bef

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: Retry-After, Backoff, Alert, Content-Length, Content-Type 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 939 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Thu, 16 Mar 2023 01:14:21 GMT 

                                            
                                                
age: 1857 

                                            
                                                
cache-control: max-age=3600,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    84db75194692d4afe13196bda6f22da8

                                                Sha1:   4c1f49bc973a4917f146d93c8d598344edc021f6

                                                Sha256: a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: binary/octet-stream

                                            

                                            
                                                
x-amz-id-2: wrjjJVC75sDjo/y2kfaC9GgilX3xW8E0YyDBqYPIudOmXQ8xxZPy20gOYvlInbOChYDiq3qJmQ6W2zgy2VxhpA== 

                                            
                                                
x-amz-request-id: YJFVGGK9R7Y1EBJV 

                                            
                                                
x-amz-server-side-encryption: AES256 

                                            
                                                
content-disposition: attachment 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
server: AmazonS3 

                                            
                                                
content-length: 5348 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Thu, 16 Mar 2023 01:23:00 GMT 

                                            
                                                
age: 1338 

                                            
                                                
last-modified: Sat, 18 Feb 2023 20:28:27 GMT 

                                            
                                                
etag: "b5ba6334e73496995e3e3a9ecd0eb323" 

                                            
                                                
cache-control: public,max-age=3600 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    b5ba6334e73496995e3e3a9ecd0eb323

                                                Sha1:   ad80d3b7718c28364e8c2004fb38a13a1747e462

                                                Sha256: aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Thu, 16 Mar 2023 01:45:18 GMT 

                                            
                                                
content-length: 12 

                                            
                                                
access-control-expose-headers: content-type 

                                            
                                                
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                            
                                                
access-control-allow-credentials: true 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
via: 1.1 google 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: Last-Modified, Retry-After, ETag, Backoff, Expires, Alert, Pragma, Cache-Control, Content-Length, Content-Type 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 329 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Thu, 16 Mar 2023 01:14:31 GMT 

                                            
                                                
age: 1848 

                                            
                                                
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                            
                                                
etag: "1648230346554" 

                                            
                                                
cache-control: max-age=3600,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: itSuZBv3dsRDKK1o0hf7Pg== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                        
                                             35.162.92.33

                                            
                                                HTTP/1.1 101 Switching Protocols

                                            

                                            
                                                
Connection: Upgrade 

                                            
                                                
Upgrade: websocket 

                                            
                                                
Sec-WebSocket-Accept: VZc4FRUk0qaDBKfA6jlY72Wp3Q8= 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             23.36.76.226

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "8783E071C3F60FBCA2BBA5260B55A41F1035E150FFD94A66FF6A102FF2BC6783" 

                                            
                                                
Last-Modified: Tue, 14 Mar 2023 03:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=6519 

                                            
                                                
Expires: Thu, 16 Mar 2023 03:33:59 GMT 

                                            
                                                
Date: Thu, 16 Mar 2023 01:45:20 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    8bd8586a0a52f516ac521f2a3752b049

                                                Sha1:   3cfd233164ae5350f2fb61250641b70e788cf58a

                                                Sha256: 8783e071c3f60fbca2bba5260b55a41f1035e150ffd94a66ff6a102ff2bc6783

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1fd984e9-181b-433d-bc47-ee8be462633c.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8678 

                                            
                                                
x-amzn-requestid: dd385283-ed6a-4990-b1a9-394d3d7d9266 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: B14BcF7dIAMFiJw= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-64123a08-4cac59d93456884026a91385;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:04 GMT 

                                            
                                                
x-amz-cf-pop: HIO50-C1, SEA19-C3 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: TuHacm9QGqDi5Uvrzys8yBF0O7WL7i2w37E1Un09bbEHX97x-EbASA== 

                                            
                                                
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Wed, 15 Mar 2023 21:47:58 GMT 

                                            
                                                
age: 14242 

                                            
                                                
etag: "ca999978ec48eca0fb99aacd599cdac22e67d98c" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8678

                                                Md5:    c40dbfe92d5c6f21255b3e8da1945cf7

                                                Sha1:   ca999978ec48eca0fb99aacd599cdac22e67d98c

                                                Sha256: f749d82d554ebe78ff69f90176f029f6db9881990e22eaa6afbf51f8d81ac947

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04285abf-0522-44d5-a610-dbdc572f8fe2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 6454 

                                            
                                                
x-amzn-requestid: 75db4751-34af-4af4-9233-4bd44b3a78c5 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: B14BnEUiIAMFw2A= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-64123a0a-5c0c24470a9e35e564d243ca;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:06 GMT 

                                            
                                                
x-amz-cf-pop: HIO50-C1, SEA19-C3 

                                            
                                                
x-cache: Miss from cloudfront 

                                            
                                                
x-amz-cf-id: qtypC9EvYuK_evQLVpMrv3J8RA0Ym7D4PKp4b7FsKOftt1M-UiDYJQ== 

                                            
                                                
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9825a45e2b387a61504c0c3df20048ee.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Wed, 15 Mar 2023 21:35:06 GMT 

                                            
                                                
age: 15014 

                                            
                                                
etag: "d71287bc6c7e50bd37ee73c6c61a005b1fe668e3" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6454

                                                Md5:    d5eecb38b600f3ae033932d71741b6d0

                                                Sha1:   d71287bc6c7e50bd37ee73c6c61a005b1fe668e3

                                                Sha256: 09df757cd6681e511c8d83e8e2a0fdd3b19b2b8f3823e57541d7838df2f3371e

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28ea495a-9a14-4b7a-bf29-31b4af0b1307.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 8021 

                                            
                                                
x-amzn-requestid: 6f86f843-812c-4f7c-ad2d-d41c0405a6b6 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: B14DnFY2IAMF7XA= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-64123a16-0da03a2e2a479bce16f2b7c3;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:18 GMT 

                                            
                                                
x-amz-cf-pop: HIO50-C1, SEA19-C3 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: ffwG3zrDUifHiQfL3eIjtPWGMJpNippphnVFcLB9E_C8oPh0Aqbwiw== 

                                            
                                                
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 3f3347264bcaae7af741e2a2f692c6a0.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Wed, 15 Mar 2023 21:48:11 GMT 

                                            
                                                
age: 14229 

                                            
                                                
etag: "6cb9cd6a44e0036dc7e30ab67c57ba6a9c500c4b" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8021

                                                Md5:    6a9438432e2551c19eff442623db83fe

                                                Sha1:   6cb9cd6a44e0036dc7e30ab67c57ba6a9c500c4b

                                                Sha256: cc41500c7ff86eae7b3fc552bce4844fe7b0eed0266cd27340d4c5ccf1f91026

URL	bitbucket.org/aneex/warzone_2.0_unlock_tool_aim_esp/downloads/Warzone_2.0_Unlock_tool_Aim_ESP.rar
IP	104.192.141.1 (United States)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access	public
Report completed	2023-03-16 01:45:31 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (9)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.192.141.1

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: bitbucket.org

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (20)

Overview

Domain Summary (9)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.192.141.1

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: bitbucket.org

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (20)

Network Intrusion Detection Systems