Report - nt436677.22web.org/

Report Overview

Submitted URL
nt436677.22web.org/
IP
185.27.134.125
ASN
#34119 Wildcard UK Limited
Submitted
2022-12-17 14:17:17
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
22

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	5.2 kB	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.161.26.194
www.netflix.com	1625	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	454 B	1.7 kB	52.214.181.141
assets.nflxext.com	3871	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.4 kB	298 kB	45.57.91.1
codex.nflxext.com	11577	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	337 kB	45.57.90.1
nt436677.22web.org	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.2 kB	137 kB	185.27.134.125
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.76.226
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	66 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2022-12-16	medium	nt436677.22web.org/	Netflix Inc.
2022-12-16	medium	nt436677.22web.org/	Netflix Inc.
2022-12-16	medium	nt436677.22web.org/	Netflix Inc.
2022-12-16	medium	nt436677.22web.org/	Netflix Inc.
2022-12-16	medium	nt436677.22web.org/	Netflix Inc.
2022-12-16	medium	nt436677.22web.org/	Netflix Inc.

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-17	medium	nt436677.22web.org/	Phishing
2022-12-17	medium	nt436677.22web.org/aes.js	Phishing
2022-12-17	medium	nt436677.22web.org/cdn.cookielaw.org/scripttemplates/otSDKStub.js	Phishing
2022-12-17	medium	nt436677.22web.org/?i=1	Phishing
2022-12-17	medium	nt436677.22web.org/cdn.cookielaw.org/scripttemplates/otSDKStub.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (17)

	URL	Size	First Seen	Last Seen
	nt436677.22web.org/?i=1	243 B	2023-03-08	2024-04-13
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:36:34 Last Seen2024-04-13 18:04:00 Times Seen7 Hash cc041af1a730f37c3bfdeead4658bf63 fce9bbcab666a7bf6d08c77a6793961d3a71ab42 a5cf2900fde8828d463d6d490ebc0ef43c78f85bc9efa9e804fbe47ad2a8a77a Loading...

	nt436677.22web.org/?i=1	827 B	2023-03-08	2024-04-13
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:36:34 Last Seen2024-04-13 18:04:00 Times Seen7 Hash 003b9ac1637d01d98df3b3feafef4291 162bbf14b27a27f886ba8379b9523e96f75bff24 97500ad6e84cfcf8fe69fdb263d401750c27577a186d058c35b534add7d2d612 Loading...

	nt436677.22web.org/?i=1	108 kB	2023-03-09	2023-03-25
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:19:33 Last Seen2023-03-25 23:14:37 Times Seen2 Hash 552cb5d1215c4604e5954d6fa98a2da0 8691a3037c225a66d00dc39b16b9d1129adf4521 dfbfeab084bfdf2d267d9cf04817880f0215d449ca5869ded99db219d3370e14 Loading...

	nt436677.22web.org/	590 B	2023-03-09	2023-03-09
Pretty URL nt436677.22web.org/ IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:19:33 Last Seen2023-03-09 13:19:33 Times Seen1 Hash b4531803b0e05f7ab96fba5fb917364a 48b0bf350bd142b8d26750d9f4d6a6600d3a4bd8 7acbb31d27c3d47831351e7df9722753ca2f335699ebd92afc0846298de8797f Loading...

	nt436677.22web.org/?i=1	5.8 kB	2023-03-08	2024-04-13
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:36:34 Last Seen2024-04-13 18:04:00 Times Seen7 Hash 261ceb51c6da99940ee42fb3057a43e9 85605c1dcdb86877ddcce7e37806b759ba41667a b4bb889c9dd2fde9b79647b5975fe5dc93bd4286b6e2250c48d27c286b7d8121 Loading...

	nt436677.22web.org/?i=1	185 B	2023-03-08	2024-04-13
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:36:34 Last Seen2024-04-13 18:04:00 Times Seen7 Hash e6ee45287f0b6775148a556e2b97b4ae 11556acf9f4bfcae8c50100e1658a8c1958f626c 80c6d95a0e07638ff51a8e534e11b99824e9a5407d9794781a62b5ae7aaac2ac Loading...

	nt436677.22web.org/?i=1	435 B	2023-03-08	2024-04-13
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:36:34 Last Seen2024-04-13 18:04:00 Times Seen7 Hash f98f29a637001b5f0e5f0b15b42ad3c0 4e5697b5a97e2ffb8a46824d5be056aabad59424 964ad76a8f0441ae9c69d8a6e911550a5e08f4f0a833242283345535146a5f20 Loading...

	nt436677.22web.org/?i=1	255 B	2023-03-08	2024-04-13
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:36:34 Last Seen2024-04-13 18:04:00 Times Seen7 Hash fa38d98d9410a8a022cb9ee4be70f892 9b9d5b04b0a09dcf5c64cf586c9cd2490abf0776 88ffb854b51656208844a415bdd3717aa0c9a75bd283c014a65ab0215709a5f6 Loading...

	nt436677.22web.org/?i=1	141 kB	2023-03-09	2024-01-01
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:19:33 Last Seen2024-01-01 05:37:09 Times Seen4 Hash 4866dad5a40b26345872b3db017f80cd dbe1ce918da86a861947b44b32d8d8cc12d15ca9 9097f7e40528720ab696efe4b874062af2f4474b12fd9b0cdcf9568b0d923f8d Loading...

	codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vac4f2de4/js/js/bootstrap.js,common%7Cbootstrap.js/2/0b39022R2K052I2W38070l003a2V352T342L2X2_2F01/bck/true/none	9.2 kB	2023-03-09	2023-03-17
Pretty URL codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vac4f2de4/js/js/bootstrap.js,common%7Cbootstrap.js/2/0b39022R2K052I2W38070l003a2V352T342L2X2_2F01/bck/true/none IP 45.57.90.1 ASN #40027 NETFLIX-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:19:33 Last Seen2023-03-17 10:28:46 Times Seen1 Hash f8a87d9213155cc71f629d74b0e74a7f b754d99a1e1078c093a5c43f51514261e0414459 985adca4ca2c06e95599e11a16e2a0124f1ed3560f046a7c0d7f1a1234a6ce07 Loading...

	nt436677.22web.org/?i=1	309 B	2023-03-09	2024-01-01
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:19:33 Last Seen2024-01-01 05:37:09 Times Seen6 Hash 8d109a56318108c73905d0c629616d6a 2b8bdf07f2e56c90a0f2277369208fa7a5a3301a b9b0ef58d7c3b8cd150fb9606319966f1c9a4e5041c3e7e98d065ec22374993b Loading...

	nt436677.22web.org/?i=1	43 B	2023-03-09	2024-04-13
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:19:33 Last Seen2024-04-13 18:04:00 Times Seen8 Hash ae8e3172160b553bbdb25d2f792e6e8f 9be776e1e9e26032728bc69d3c2d56c9ad1de7e3 c47c9318a6d36823f6a8d83b3e3e8417cbc1a43557c97439ef7b280c76e1b564 Loading...

	nt436677.22web.org/?i=1	819 B	2023-03-08	2024-04-13
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:36:34 Last Seen2024-04-13 18:04:00 Times Seen7 Hash 551359810e386f9ce64794b495c45f87 4a95210aa26163ee2a98e62fd949bf0f46b9d60a 48898dc12a074e3920533d0787296929a0e1011a38bd594277c5962909038a4e Loading...

	nt436677.22web.org/?i=1	948 B	2023-03-09	2024-01-01
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:19:33 Last Seen2024-01-01 05:37:09 Times Seen4 Hash f39be2d9db50583cba5dced35f49fddf c07c36dd7d70cafaed3dc5b862c06b3d737c5c43 14bf6c1b5aaddd1ec1dd432afbddb053aed26f0e567ee3c46d1d2a92bbfa26db Loading...

	nt436677.22web.org/?i=1	80 B	2023-03-09	2024-04-19
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:19:33 Last Seen2024-04-19 07:43:53 Times Seen11 Hash 31caa306d240f5748229ef9699f5cd9e ec5828e379dc207e3af65b430b1f9b20f93323dc 2802ed175b394e679988c81977337133feae62f26398541e546deeb1c8f3eb19 Loading...

	nt436677.22web.org/?i=1	1.5 kB	2023-03-09	2024-01-01
Pretty URL nt436677.22web.org/?i=1 IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 13:19:33 Last Seen2024-01-01 05:37:09 Times Seen4 Hash 985a5d4964056e9c98041456df06ef47 40dc4a5bcbee8009550b8602b891a0864393714f 0735ffb379f6da56c057821c219111b790d2e618079e63c0ee338279c1ee9685 Loading...

	nt436677.22web.org/aes.js	31 kB	2023-03-07	2023-10-29
Pretty URL nt436677.22web.org/aes.js IP 185.27.134.125 ASN #34119 Wildcard UK Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:52 Last Seen2023-10-29 08:51:10 Times Seen3453 Hash 78a66859739b0c9e18bc5b4538c03bf9 77aa2fbbc258645904620937b387d3deedbd16ea d2701c86a2a31a641520e72121749dbbabeed4b1a59aece20bbf14f9c9de82bc Loading...

HTTP Transactions (41)

URL IP Response Size

nt436677.22web.org/

185.27.134.125

200 OK

556 B

URL HTTP/1.1
nt436677.22web.org/
IP
185.27.134.125:0
ASN
#34119 Wildcard UK Limited

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (829), with no line terminators
Size
556 B (556 bytes)
Hash
7f5623d4abc582c6d3d67ce9c3bbe6c9
694e8e7ac2d7f424179464b3d7a887157fbc22b9
b77ed975ec8bc1614cff40f44670589adc703676ed7d79e5602ec7e17c6b0bce

Detections

Analyzer	Verdict	Alert
openphish	Netflix Inc.
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: nt436677.22web.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 14:17:05 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Content-Encoding: gzip

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
96367f956a4177aec7e7e80221539d58
8dcad10fde96c139d1ef212388cb6755fe3fe077
f4f9bdb5180359dfd734cef1e6f1b54bc9d8f72cae557366eb74f22100b94dc4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4F9BDB5180359DFD734CEF1E6F1B54BC9D8F72CAE557366EB74F22100B94DC4"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12374
Expires: Sat, 17 Dec 2022 17:43:20 GMT
Date: Sat, 17 Dec 2022 14:17:06 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ae86164fd9297dfdc05d67d69284d70e
5e5f27e3fd492f715baa6820f05c0fafde4040b3
be20f6ae6a51d20611cb4d350b52a5d0a339af6722fe9b2482ef58826c1e9de0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE20F6AE6A51D20611CB4D350B52A5D0A339AF6722FE9B2482EF58826C1E9DE0"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9371
Expires: Sat, 17 Dec 2022 16:53:17 GMT
Date: Sat, 17 Dec 2022 14:17:06 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 17 Dec 2022 13:45:21 GMT
content-type: application/json
age: 1905
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
555fc6e99ad3bf077d1c4b9b805e428d
4e800fc8e809a950288df0e94992084647762561
fac00cada519279717e2a13528cb202d292fc92ed5eb42782c41f8e7b9509eaf

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAC00CADA519279717E2A13528CB202D292FC92ED5EB42782C41F8E7B9509EAF"
Last-Modified: Fri, 16 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5504
Expires: Sat, 17 Dec 2022 15:48:50 GMT
Date: Sat, 17 Dec 2022 14:17:06 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: hbu5fQeExddR619hnaBnS823oor1ohWum0yGHjPe9hIC9uEjEhXtnNOUNTwLvZM4comO2yQsKsM=
x-amz-request-id: W3WQ3QQJ1S0H9DP9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 17 Dec 2022 13:51:48 GMT
age: 1518
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

nt436677.22web.org/aes.js

185.27.134.125

200 OK

31 kB

URL HTTP/1.1
nt436677.22web.org/aes.js
IP
185.27.134.125:0
ASN
#34119 Wildcard UK Limited

File type
ASCII text, with CRLF line terminators
Size
31 kB (31206 bytes)
Hash
78a66859739b0c9e18bc5b4538c03bf9
77aa2fbbc258645904620937b387d3deedbd16ea
d2701c86a2a31a641520e72121749dbbabeed4b1a59aece20bbf14f9c9de82bc

Detections

Analyzer	Verdict	Alert
openphish	Netflix Inc.
fortinet	Phishing

HTTP Headers

GET /aes.js HTTP/1.1
Host: nt436677.22web.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nt436677.22web.org/

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 14:17:05 GMT
Content-Type: application/javascript
Content-Length: 31206
Last-Modified: Sat, 08 Aug 2015 08:12:26 GMT
Connection: keep-alive
ETag: "55c5b9ea-79e6"
Accept-Ranges: bytes

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 17 Dec 2022 14:17:06 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 17 Dec 2022 14:08:00 GMT
age: 546
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
2d1752cd6eb7f48e7494373911a5b996
43d9c23c4d03cccce0fc478f0e12c0874dc762fd
aded7fd1d638c001b0b462fdfeee0549d2ed61b51ced88eb83690e2e20ed36d8

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6262
Cache-Control: max-age=160447
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 14:17:06 GMT
Etag: "639d86ab-1d7"
Expires: Mon, 19 Dec 2022 10:51:13 GMT
Last-Modified: Sat, 17 Dec 2022 09:06:51 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

35.161.26.194

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.161.26.194:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: MnmfRp7S72SDalBcxVhqWg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: M28JL+Ef1jqw51dIjXjSePgd1Dk=

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6565
Expires: Sat, 17 Dec 2022 16:06:33 GMT
Date: Sat, 17 Dec 2022 14:17:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6565
Expires: Sat, 17 Dec 2022 16:06:33 GMT
Date: Sat, 17 Dec 2022 14:17:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6565
Expires: Sat, 17 Dec 2022 16:06:33 GMT
Date: Sat, 17 Dec 2022 14:17:08 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0e5a8cf5962c05bf28a3b45f5c8745e2
9c5d7e8aeab26f9fd2e753ab4dc65d6fa8ea955f
f614642045fcd0ee373ed6cabe67514f4bb54c7fb4f1181b52eaec12d7e0479e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F614642045FCD0EE373ED6CABE67514F4BB54C7FB4F1181B52EAEC12D7E0479E"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6565
Expires: Sat, 17 Dec 2022 16:06:33 GMT
Date: Sat, 17 Dec 2022 14:17:08 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg

34.120.237.76

200 OK

9.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.8 kB (9837 bytes)
Hash
2fae5a52ce167de2a060dc814a744e98
4b108a79a4ad796a34f4b2b8950df907137680e3
61e1fe4a8c074a031e0628ca393449e42d70dcf3411481936c26c1fad7a5451b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F716d5374-26a4-47e3-9c6a-62120a177040.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9837
x-amzn-requestid: 7c104466-a4d8-4e03-94e6-79a18bd3bf54
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjWiEMlIAMFaaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce5c3-4b0e776f4f0edd533795a6ee;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:40:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XlYdfi_9fWjFtw83t9kvwNEzkpJSpsCtlZS3RLmUkk6FZqzVDvaIOg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 22:00:56 GMT
age: 58572
etag: "4b108a79a4ad796a34f4b2b8950df907137680e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30eabd90-57de-40c1-8f98-3a7df7e6c6db.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.0 kB (9027 bytes)
Hash
406a837a79921b55b79cbefe97f28baa
852e6b2fbc7cf50ed1824491293036092ca928e5
310c2d8f56b08dbcc4a6373ec8b7d4c33e531540eb8b5c446609398ee9f3448a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30eabd90-57de-40c1-8f98-3a7df7e6c6db.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9027
x-amzn-requestid: 810f640d-b3dd-42fd-8317-f701a2bdb551
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjEjHRfoAMFRfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce550-666de65c79de87b06a985a83;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y34VDlEkPoUgYchKTvPk-88ObNqiDdQWc-9Z3tmuI0TUbSmhliD0iw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:29 GMT
age: 59799
etag: "852e6b2fbc7cf50ed1824491293036092ca928e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.0 kB (7048 bytes)
Hash
1c3454ef9b4c0d31eecf53e44471cecb
f1182e860380b637388fa7f90c36e0a8c9edd657
c474493452d48121f0050efdd197231909d3c9de0fccbe07bf5706162b848624

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ae934ee-7c6e-4784-90fd-ef6c864097ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7048
x-amzn-requestid: d2665a61-0c5f-429e-bd9c-f4c6aec4fe14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjEvH6VIAMFd2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce551-65d1775b5f07d8bf10beae48;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJNyzGWhcttjEcjKD669XnGbW8WYV_WzKlei6kkoRjgFR2jAhMRBwQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:49:11 GMT
age: 59277
etag: "f1182e860380b637388fa7f90c36e0a8c9edd657"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340d7003-71e4-4f8e-a457-d067d05e0525.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11667 bytes)
Hash
dce7a87ac0852f838007018af2e83cb5
379f7844a18284958ec0250cc45f2c91ac1ddfcf
31a5191700b9d5c2e471c0e6db15d43f1804b61c6a0867340e8001c32a0dabb5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F340d7003-71e4-4f8e-a457-d067d05e0525.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: f8f1832c-4269-4c4b-83c0-4c2d8c2fdd8f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjC7GLSIAMFd4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce545-4c54f9704a32da245a90ab0d;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CrmrekFQeOTjAkIBgbGSNGN66ysdrtGK1uuzJV-b6nB1WFrOrtf1OA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
age: 59809
etag: "379f7844a18284958ec0250cc45f2c91ac1ddfcf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.7 kB (9741 bytes)
Hash
4fdbd1e175352e7ec7dc2a25f04a5a9d
954bdd8d6b2f3d0ec086631ecf1bbd76c6507fe2
bdba0c3d4509764e87db688c1b8086c309f4a2cbe95d1f2130ce01d184f2fa17

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a0c4858-28d1-47b1-bfba-b4500f28eeae.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9741
x-amzn-requestid: 5d9871d6-1512-4ffa-8b85-3c4c7595b723
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dEj3XGsxoAMFxIQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639819c8-7a65df352cc4e71e5aa518f8;Sampled=0
x-amzn-remapped-date: Tue, 13 Dec 2022 06:20:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _2xwG3Jz7sG9b8-JqXhu2knuIO_AyHIjOQ2luKB9Tk9NZnFNv8b8iQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 22:01:03 GMT
age: 58565
etag: "954bdd8d6b2f3d0ec086631ecf1bbd76c6507fe2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.0 kB (8002 bytes)
Hash
86be9c16e4a62785e7f3a0cc8a956143
6cac191c918ff47d3e66e327e8c8a9c0fec9a88b
81dfec15eb1dc19acae5071663b9deaa9fa11f00378e36871c5b31a548a0626b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F65c9cdbb-21b2-465b-8f75-329260ada5cc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8002
x-amzn-requestid: bcaeff23-947f-441a-8aea-1e0d54f2cc3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjD7GjdoAMFVIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce54c-5fb0d9d76945c4f63d210806;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lTaL4VGiiP30sAgykA1UmFV6qxCbS_3Aa5mXbKTwkG6deggokEkZFw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 22:01:03 GMT
age: 58565
etag: "6cac191c918ff47d3e66e327e8c8a9c0fec9a88b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
763b07eca07f8694712142445df7533b
d559d10d41ac5cd299464b2d1adbd27405b9d37e
c1fbd068ce7735bc54f87ff4a232c9bd2f6c23ecbcc5ad09e95ebdca1ec6b641

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5516
Cache-Control: max-age=160812
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 14:17:09 GMT
Etag: "639d8b05-118"
Expires: Mon, 19 Dec 2022 10:57:21 GMT
Last-Modified: Sat, 17 Dec 2022 09:25:25 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
a63bf23cd3b4bfe386f6d9cb0711e53f
b46d045a5d20ffd663eb6007dc928d4cb652330f
dae560701f1b2071a51767b34618a79b1ba2384999e85634b536b2a99270426f

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 401
Cache-Control: max-age=88011
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 14:17:09 GMT
Etag: "639c829f-117"
Expires: Sun, 18 Dec 2022 14:44:00 GMT
Last-Modified: Fri, 16 Dec 2022 14:37:19 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279

nt436677.22web.org/cdn.cookielaw.org/scripttemplates/otSDKStub.js

185.27.134.125

404 Not Found

3.6 kB

URL HTTP/1.1
nt436677.22web.org/cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
185.27.134.125:0
ASN
#34119 Wildcard UK Limited

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2228)
Size
3.6 kB (3607 bytes)
Hash
3452726553bb851bd35d675927852e36
f00f19fc630a2bde836505f247146377069b0f85
8144b12ec24497630c0ac12e0332984fb0a01d15a1076e01aab06589e2eaa675

Detections

Analyzer	Verdict	Alert
openphish	Netflix Inc.
fortinet	Phishing

HTTP Headers

GET /cdn.cookielaw.org/scripttemplates/otSDKStub.js HTTP/1.1
Host: nt436677.22web.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nt436677.22web.org/?i=1
Cookie: __test=7da11f1c3aec6fedc537eb0a7f6e670d

HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 17 Dec 2022 14:17:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 16 Sep 2018 19:14:37 GMT
Cache-Control: max-age=5, public, proxy-revalidate, public, proxy-revalidate
Content-Encoding: gzip

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
2107ed8330e422cf619ae80d210510f8
d094fa652515538b279898bd7d3eca89e1024bdd
27de2c523a890f71bbeb1416d3c4ad924d596c462f78889ae805067cde5c5ab3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 673
Cache-Control: max-age=134704
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 14:17:09 GMT
Etag: "639d37f4-117"
Expires: Mon, 19 Dec 2022 03:42:13 GMT
Last-Modified: Sat, 17 Dec 2022 03:31:00 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

278 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
278 B (278 bytes)
Hash
aae9139097946e6365ec5052d7749c71
68e0dff73a40066e617d84127daad468729a07f3
d728867b0e6a7615f7448d72a9d4dd646569fdb6b94816abbdccaf476b0edb18

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1252
Cache-Control: max-age=138894
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 14:17:09 GMT
Etag: "639d460f-116"
Expires: Mon, 19 Dec 2022 04:52:03 GMT
Last-Modified: Sat, 17 Dec 2022 04:31:11 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 278

nt436677.22web.org/?i=1

185.27.134.125

200 OK

96 kB

URL HTTP/1.1
nt436677.22web.org/?i=1
IP
185.27.134.125:0
ASN
#34119 Wildcard UK Limited

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (487)
Size
96 kB (96037 bytes)
Hash
6870d74cd13f9fc09f0cf2e9899000dd
845b9cc15cc0897fd646ce4f9699e7d89add0823
c64dcb4719386523121ee17cf25b47aa72210c7c8a6404cdc00a004a70600e36

Detections

Analyzer	Verdict	Alert
openphish	Netflix Inc.
fortinet	Phishing

HTTP Headers

GET /?i=1 HTTP/1.1
Host: nt436677.22web.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nt436677.22web.org/
Cookie: __test=7da11f1c3aec6fedc537eb0a7f6e670d
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 14:17:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 15 Dec 2022 22:40:30 GMT
Cache-Control: max-age=2592000, public, proxy-revalidate, public, proxy-revalidate
Expires: Mon, 16 Jan 2023 14:17:05 GMT
Content-Encoding: gzip

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
d8da241542467800ad1770cbed356f11
e971dca50e689b83e42cf554295e4b9962db78f3
d4e66b9f79fefefc741729525301286974231bf73f0859337c3d62630112088c

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 698
Cache-Control: max-age=152384
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 14:17:09 GMT
Etag: "639d7ceb-117"
Expires: Mon, 19 Dec 2022 08:36:53 GMT
Last-Modified: Sat, 17 Dec 2022 08:25:15 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
907f0e3b969cbeb399656f9c0330d654
e4e03b6bd749d256c251e752dee4875910824e4a
cc62c2d03323923880ca109d7327f80744cdeef7b42f9f8462b1867ed412fb71

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6072
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 14:17:09 GMT
Last-Modified: Sat, 17 Dec 2022 12:35:57 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vac4f2de4/js/js/bootstrap.js,common%7Cbootstrap.js/2/0b39022R2K052I2W38070l003a2V352T342L2X2_2F01/bck/true/none

45.57.90.1

200 OK

3.6 kB

URL HTTP/1.1
codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vac4f2de4/js/js/bootstrap.js,common%7Cbootstrap.js/2/0b39022R2K052I2W38070l003a2V352T342L2X2_2F01/bck/true/none
IP
45.57.90.1:0
ASN
#40027 NETFLIX-ASN

File type
ASCII text, with very long lines (9235), with no line terminators
Size
3.6 kB (3632 bytes)
Hash
b18b8e9503be1fd124411afc852e6065
8dce3ad39a0d6567e9e3fad5ec4b3c6dcc7af161
91331dd17ea2e7b19a62daeb5b9a8f79391ad7593ff96e30794f8c55ae772c90

HTTP Headers

GET /%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vac4f2de4/js/js/bootstrap.js,common%7Cbootstrap.js/2/0b39022R2K052I2W38070l003a2V352T342L2X2_2F01/bck/true/none HTTP/1.1
Host: codex.nflxext.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nt436677.22web.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 14:17:09 GMT
Content-Type: application/javascript; charset=UTF-8
Content-Length: 3632
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=16070400
Content-Encoding: gzip
Expires: Wed, 21 Jun 2023 14:17:09 GMT
req_id: 0d7c3489-5be9-4a0a-8f9e-0a3ce7ac10f5
Timing-Allow-Origin: https://www.netflix.com
X-Content-Type-Options: nosniff

codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vac4f2de4/css/css/less%7Ccore%7Cerror-page.less/1/botqw4vpjgas/none/true/none

45.57.90.1

200 OK

2.6 kB

URL HTTP/1.1
codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vac4f2de4/css/css/less%7Ccore%7Cerror-page.less/1/botqw4vpjgas/none/true/none
IP
45.57.90.1:0
ASN
#40027 NETFLIX-ASN

File type
ASCII text, with very long lines (11540), with no line terminators
Size
2.6 kB (2595 bytes)
Hash
505561e734833532539a6fde9825b126
f85b37a06168a34310552e426629007e02205df0
de7c958ea748a5de52d5fb6e157ce758d7af5f26dc6247ccb18f0755e91d6b2f

HTTP Headers

GET /%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vac4f2de4/css/css/less%7Ccore%7Cerror-page.less/1/botqw4vpjgas/none/true/none HTTP/1.1
Host: codex.nflxext.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nt436677.22web.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 14:17:09 GMT
Content-Type: text/css; charset=UTF-8
Content-Length: 2595
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=16070400
Content-Encoding: gzip
Expires: Wed, 21 Jun 2023 14:17:09 GMT
req_id: 014896cc-36fc-4e7d-a6af-2e128399a7af
Timing-Allow-Origin: https://www.netflix.com
X-Content-Type-Options: nosniff

codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vac4f2de4/css/css/less%7Clogin%7CloginBase.less,less%7Cpages%7Clogin%7CLogin.less/1/botqw4vpjgas/none/true/none

45.57.90.1

200 OK

22 kB

URL HTTP/1.1
codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vac4f2de4/css/css/less%7Clogin%7CloginBase.less,less%7Cpages%7Clogin%7CLogin.less/1/botqw4vpjgas/none/true/none
IP
45.57.90.1:0
ASN
#40027 NETFLIX-ASN

File type
ASCII text, with very long lines (65536), with no line terminators
Size
22 kB (21645 bytes)
Hash
d2c4c093868c090273509ecb77213839
ea65a470ed399e1373c4ee6b5de42009d06d7182
2bae94b34fcf11148192999cded15f9687e5d98493c799e1981f3add453f9383

HTTP Headers

GET /%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vac4f2de4/css/css/less%7Clogin%7CloginBase.less,less%7Cpages%7Clogin%7CLogin.less/1/botqw4vpjgas/none/true/none HTTP/1.1
Host: codex.nflxext.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nt436677.22web.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 14:17:09 GMT
Content-Type: text/css; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=16070400
Content-Encoding: gzip
Expires: Wed, 21 Jun 2023 14:17:09 GMT
req_id: 51baa6d7-daea-428a-b8ad-31673845e1da
Timing-Allow-Origin: https://www.netflix.com
X-Content-Type-Options: nosniff

www.netflix.com/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=login

52.214.181.141

200 OK

0 B

URL HTTP/2
www.netflix.com/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=login
IP
52.214.181.141:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=login HTTP/1.1
Host: www.netflix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nt436677.22web.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: http://nt436677.22web.org/
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
cache-control: max-age=0
expires: Fri, 16 Dec 2022 14:17:09 GMT
pragma: no-cache
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-length: 0
date: Sat, 17 Dec 2022 14:17:08 GMT
x-envoy-upstream-service-time: 1
x-b3-traceid: 32a4eb45a1798e28
x-request-id: 790af2c3-1dad-423e-ae32-d4432108ae86
server: clingest-secure i-071ee0f52b2ce152a
x-envoy-decorator-operation: lo_svc_http
via: 2 i-0e4b0fec88e190c25 (eu-west-1)
strict-transport-security: max-age=31536000; includeSubDomains
x-originating-url: http://www.netflix.com/personalization/cl2/freeform/WebsiteDetect?modalView=login&source=wwwhead&fetchType=css
x-netflix.nfstatus: 1_1
set-cookie: memclid=53fd7b60-6112-49ad-94d2-071257f2069f; Max-Age=31536000; Expires=Sun, 17 Dec 2023 14:17:09 GMT; Path=/; Domain=.netflix.com
nfvdid=BQFmAAEBEFttDAPODLEeOK7MNeAOht5AJaaA%2B78Ndn4TCaohf2GzdAww51iTckPmS4q5qWaKC8jw0nTTOON%2FD5EF6zd%2FbBx1NivbJw391Re4REZmEVOvGQ%3D%3D; Max-Age=26265600; Expires=Tue, 17 Oct 2023 14:17:09 GMT; Path=/; Domain=.netflix.com
x-netflix.proxy.execution-time: 11
X-Firefox-Spdy: h2

nt436677.22web.org/cdn.cookielaw.org/scripttemplates/otSDKStub.js

185.27.134.125

404 Not Found

3.6 kB

URL HTTP/1.1
nt436677.22web.org/cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
185.27.134.125:0
ASN
#34119 Wildcard UK Limited

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2228)
Size
3.6 kB (3607 bytes)
Hash
3452726553bb851bd35d675927852e36
f00f19fc630a2bde836505f247146377069b0f85
8144b12ec24497630c0ac12e0332984fb0a01d15a1076e01aab06589e2eaa675

Detections

Analyzer	Verdict	Alert
openphish	Netflix Inc.
fortinet	Phishing

HTTP Headers

GET /cdn.cookielaw.org/scripttemplates/otSDKStub.js HTTP/1.1
Host: nt436677.22web.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nt436677.22web.org/?i=1
Cookie: __test=7da11f1c3aec6fedc537eb0a7f6e670d

HTTP/1.1 404 Not Found
Server: nginx
Date: Sat, 17 Dec 2022 14:17:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 16 Sep 2018 19:14:37 GMT
Cache-Control: max-age=5, public, proxy-revalidate, public, proxy-revalidate
Content-Encoding: gzip

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
3b3fbb1b6af56cb37a1454e1c8b3eff9
ac1fae935483623aeef1110ddf48fc8cbc825c4f
cc135e393c359f1b1973b973e56dff6778174e61e3fb3cbc8e858042c4ad12cf

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 775
Cache-Control: max-age=141279
Content-Type: application/ocsp-response
Date: Sat, 17 Dec 2022 14:17:09 GMT
Etag: "639d513e-117"
Expires: Mon, 19 Dec 2022 05:31:48 GMT
Last-Modified: Sat, 17 Dec 2022 05:18:54 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279

assets.nflxext.com/ffe/siteui/fonts/nf-icon-v1-93.woff

45.57.91.1

200 OK

74 kB

URL HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/nf-icon-v1-93.woff
IP
45.57.91.1:0
ASN
#40027 NETFLIX-ASN

File type
Web Open Font Format, CFF, length 73572, version 0.0\012- data
Size
74 kB (73572 bytes)
Hash
7cf6156cc481244b5a254362d7b73f00
4391003d1cb06d2bd1921a5813a57604fa7d9935
98713b53a74ebe7e326353080c5f1653e83af61d6363c0b3c4c67d6d24197b4d

HTTP Headers

GET /ffe/siteui/fonts/nf-icon-v1-93.woff HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://nt436677.22web.org
Connection: keep-alive
Referer: https://codex.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 14:17:09 GMT
Content-Type: font/woff
Content-Length: 73572
Connection: keep-alive
Content-MD5: fPYVbMSBJEtaJUNi17c/AA==
Last-Modified: Mon, 29 Jan 2018 01:50:51 GMT
Cache-Control: max-age=604801
Expires: Sat, 24 Dec 2022 14:17:10 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.ico

45.57.91.1

200 OK

17 kB

URL HTTP/1.1
assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.ico
IP
45.57.91.1:0
ASN
#40027 NETFLIX-ASN

File type
MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Size
17 kB (16958 bytes)
Hash
41b45fdce09bd6acd07c7a8949da675e
931e18dfc6e7d950dc2f2bbdfe31e1ea720acf7c
abe8012eb65c0dc0ac3e87dcc1e60e1908ebd8f12b7c47a5df1856f7a7bb1edd

HTTP Headers

GET /us/ffe/siteui/common/icons/nficon2016.ico HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nt436677.22web.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 14:17:09 GMT
Content-Type: image/x-icon
Content-Length: 16958
Connection: keep-alive
Content-MD5: QbRf3OCb1qzQfHqJSdpnXg==
Last-Modified: Tue, 21 Jun 2016 21:54:27 GMT
Cache-Control: max-age=604801
Expires: Sat, 24 Dec 2022 14:17:10 GMT
Accept-Ranges: bytes
X-Firefox-Early-Data: accepted

nt436677.22web.org/assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.png

185.27.134.125

403 Forbidden

18 B

URL HTTP/1.1
nt436677.22web.org/assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.png
IP
185.27.134.125:0
ASN
#34119 Wildcard UK Limited

File type
ASCII text
Size
18 B (18 bytes)
Hash
15545f64d6abda2a5802950fb8b61cbb
e9caff983e39a70abefbf17a85730430a54e2c43
7007ef3aeca92f35364a1cbe848756bbf59e49710bd28fde323170010d6046fb

Detections

Analyzer	Verdict	Alert
openphish	Netflix Inc.

HTTP Headers

GET /assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.png HTTP/1.1
Host: nt436677.22web.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nt436677.22web.org/?i=1
Cookie: __test=7da11f1c3aec6fedc537eb0a7f6e670d

HTTP/1.1 403 Forbidden
Server: nginx
Date: Sat, 17 Dec 2022 14:17:09 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 18
Connection: keep-alive
Cache-Control: max-age=5

assets.nflxext.com/ffe/siteui/vlv3/1691099b-ff71-4321-bd54-1bba46b0886b/9aa5bdc5-3467-476e-a494-888ef2d41739/CO-es-20220228-popsignuptwoweeks-perspective_alpha_website_medium.jpg

45.57.91.1

200 OK

206 kB

URL HTTP/1.1
assets.nflxext.com/ffe/siteui/vlv3/1691099b-ff71-4321-bd54-1bba46b0886b/9aa5bdc5-3467-476e-a494-888ef2d41739/CO-es-20220228-popsignuptwoweeks-perspective_alpha_website_medium.jpg
IP
45.57.91.1:0
ASN
#40027 NETFLIX-ASN

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3\012- data
Size
206 kB (205931 bytes)
Hash
41a023760a09361257ddc88536ad3d3e
a8c639221d402f4094877183d48e9780c74f2409
4e058b13a00651547b53eccfa1c004c22249776ea76b324e2d600aac9d47d010

HTTP Headers

GET /ffe/siteui/vlv3/1691099b-ff71-4321-bd54-1bba46b0886b/9aa5bdc5-3467-476e-a494-888ef2d41739/CO-es-20220228-popsignuptwoweeks-perspective_alpha_website_medium.jpg HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nt436677.22web.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 14:17:09 GMT
Content-Type: image/jpeg
Content-Length: 205931
Connection: keep-alive
Accept-Ranges: bytes
Content-MD5: QaAjdgoJNhJX3ciFNq09Pg==
Last-Modified: Wed, 02 Mar 2022 13:47:00 GMT
Cache-Control: max-age=604801
Expires: Sat, 24 Dec 2022 14:17:10 GMT

codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vac4f2de4/js/js/components%7Clogin%7CloginControllerClient.js/2/0b39022R2K052I2W38070l003a2V352T342L2X2_2F01/l/true/none

45.57.90.1

200 OK

308 kB

URL HTTP/1.1
codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vac4f2de4/js/js/components%7Clogin%7CloginControllerClient.js/2/0b39022R2K052I2W38070l003a2V352T342L2X2_2F01/l/true/none
IP
45.57.90.1:0
ASN
#40027 NETFLIX-ASN

File type
ASCII text, with very long lines (65536), with no line terminators
Size
308 kB (307619 bytes)
Hash
92ef764f38cd89b3a014c4e273d8b810
c245aefa752821f2bd1bb996ffe768396d9a0bea
4da470d8bf2d373274f3c5b9396e03e61d8accc7e50e33d4e4826bb384912cf2

HTTP Headers

GET /%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vac4f2de4/js/js/components%7Clogin%7CloginControllerClient.js/2/0b39022R2K052I2W38070l003a2V352T342L2X2_2F01/l/true/none HTTP/1.1
Host: codex.nflxext.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nt436677.22web.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Dec 2022 14:17:11 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=16070400
Content-Encoding: gzip
Expires: Wed, 21 Jun 2023 14:17:11 GMT
req_id: 142c344b-2689-49f4-86e1-93770b4f1248
Timing-Allow-Origin: https://www.netflix.com
X-Content-Type-Options: nosniff

34.120.237.76

200 OK

3.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff51ac90a-c2c5-496b-b25c-c63f50725d46.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
3.7 kB (3694 bytes)
Hash
f07a84becb488cb02572fe128497847b
980c7c7808e8df6ba78b8f2567640b7d8f8e05a1
586d4afd9c889128c22ba61144df743d70a65b7b75b07a96f2cda821db1503af

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff51ac90a-c2c5-496b-b25c-c63f50725d46.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 3694
x-amzn-requestid: 49e877d8-c2cd-4497-8658-385caa25a6ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dQjEbHJNIAMF8Mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ce54f-0c9c4b5d18502bdd5b3c9be9;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 21:38:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: P_b17hLfntWIkfYHVfgiAvNgG0iZKOqFGLn8Tm56gD8E4NY9ftPYiQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 16 Dec 2022 21:40:19 GMT
age: 59816
etag: "980c7c7808e8df6ba78b8f2567640b7d8f8e05a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (17)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations