Report - dialin.plcm.vc/teams/?key=889822014&conf=1338279579

Report Overview

Submitted URL
dialin.plcm.vc/teams/?key=889822014&conf=1338279579
IP
40.74.50.173
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2023-03-31 09:37:19
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-31T18:12:09Z	333 B	391 B	34.117.237.239
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-31T18:12:03Z	1.4 kB	2.8 kB	216.58.211.3
shavar.services.mozilla.com	3602	2015-09-28T08:30:01Z	2023-03-31T20:22:30Z	453 B	204 B	54.148.4.3
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-31T18:12:04Z	3.4 kB	8.9 kB	95.101.11.115
getpocket.cdn.mozilla.net	1369	2018-08-28T15:15:36Z	2023-03-31T18:39:46Z	435 B	52 kB	34.120.5.221
fonts.googleapis.com	8877	2013-06-10T22:14:26Z	2023-03-31T20:23:24Z	393 B	630 B	142.250.74.138
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-31T18:18:04Z	840 B	12 kB	34.160.144.191
firefox-settings-attachments.cdn.mozilla.net	11509	2019-11-30T10:32:57Z	2023-03-31T20:22:30Z	412 B	808 kB	34.111.73.144
code.jquery.com	634	2012-05-21T19:28:02Z	2023-03-31T18:13:43Z	369 B	30 kB	69.16.175.10
fonts.gstatic.com	unknown	2014-09-09T02:40:21Z	2023-03-31T20:44:48Z	1.0 kB	29 kB	216.58.207.227
maxcdn.bootstrapcdn.com	724	2014-06-18T02:37:31Z	2023-03-31T18:17:08Z	831 B	24 kB	104.18.10.207
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-31T07:51:33Z	3.2 kB	62 kB	34.120.237.76
detectportal.firefox.com	1601	2018-08-30T11:52:03Z	2023-03-31T18:17:47Z	909 B	642 B	34.107.221.82
dialin.plcm.vc	84040	2017-02-28T18:01:31Z	2023-03-30T19:21:27Z	9.2 kB	48 kB	40.74.50.173
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-31T21:56:16Z	341 B	799 B	192.229.221.95
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-31T18:14:44Z	8.6 kB	302 kB	35.241.9.150
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-31T18:13:52Z	606 B	238 B	34.117.65.55

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	dialin.plcm.vc/teams/js/pip.js	65 B	2023-03-13	2023-09-11
Pretty URL dialin.plcm.vc/teams/js/pip.js IP 40.74.50.173 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 07:52:14 Last Seen2023-09-11 02:29:05 Times Seen4 Hash 6049a03b3c4e8ac6e8aa7dd983535933 583fd9ec8ef8cb1fe59dbe58300a3815b37207c5 edb01964dded0e376da528f3ac122dc6a54a864a590cf6f2ac0f72b8d1bf7d59 Loading...

	dialin.plcm.vc/teams/js/dialin.js	4.9 kB	2023-03-13	2023-09-11
Pretty URL dialin.plcm.vc/teams/js/dialin.js IP 40.74.50.173 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 07:52:14 Last Seen2023-09-11 02:29:05 Times Seen4 Hash b39f224f08eb28115144ff4f2ee142c2 af4fef318b4f4e77e0db1a5ad4034aab4b7bde88 65d020c391c1f7cfa2d543a3c08d02232620511eb610579c3c6959192c2ef870 Loading...

	dialin.plcm.vc/vendor/jquery_i18n/jquery.i18n.messagestore.js	3.6 kB	2023-03-09	2023-09-11
Pretty URL dialin.plcm.vc/vendor/jquery_i18n/jquery.i18n.messagestore.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 14:15:07 Last Seen2023-09-11 02:29:05 Times Seen5 Hash 7ec4166fb2e8e6e06d8f73e7ef10d0ae 39f66151dd6e4e87f361565b56e54c008cc6c1b7 dff7f2eda17c15542e88b63fbc871fba4b4cf35332c73136cca0f193fa7e15fb Loading...

	dialin.plcm.vc/vendor/jquery_i18n/jquery.i18n.js	8.6 kB	2023-03-13	2023-09-11
Pretty URL dialin.plcm.vc/vendor/jquery_i18n/jquery.i18n.js IP 40.74.50.173 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 07:52:14 Last Seen2023-09-11 02:29:05 Times Seen4 Hash a871470023cd74a6bdc7b6c6d63c8e29 eac756b305e4ee381f9dfccefc7ed9315625a274 1203ca7a1b2ecf0e154286694be8f9b0a1c3f6ea29425c6cfd7a82f06f478566 Loading...

	maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js	37 kB	2023-03-07	2024-04-25
Pretty URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js IP 104.18.10.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:54 Last Seen2024-04-25 03:27:19 Times Seen54553 Hash 5869c96cc8f19086aee625d670d741f9 430a443d74830fe9be26efca431f448c1b3740f9 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef Loading...

	unknown	0 B	2023-03-07	2024-04-25
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 03:52:44 Times Seen37053570 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	dialin.plcm.vc/vendor/jquery_i18n/CLDRPluralRuleParser.js	14 kB	2023-03-13	2023-09-11
Pretty URL dialin.plcm.vc/vendor/jquery_i18n/CLDRPluralRuleParser.js IP 40.74.50.173 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 07:52:14 Last Seen2023-09-11 02:29:05 Times Seen4 Hash 67a30838a8206d96b704ac5a467218fb 8348b4db7a7bef5abbd51756f139796281f387d0 d4a136b96d9d1dbb40ea9d3ffbf028d4f27029a2889d93b9b6c6e5aa1d04cec2 Loading...

HTTP Transactions (75)

	URL	IP	Response	Size
	detectportal.firefox.com/success.txt?ipv4	34.107.221.82	200 OK	8 B
URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4 IP 34.107.221.82:0 ASN #15169 GOOGLE File type ASCII text Size 8 B (8 bytes) Hash ae780585f49b94ce1444eb7d28906123 7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5 HTTP Headers `GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 30 Mar 2023 13:52:43 GMT Age: 71059 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600`

	dialin.plcm.vc/teams/?key=889822014&conf=1338279579	40.74.50.173	200 OK	2.6 kB
URL HTTP/1.1 dialin.plcm.vc/teams/?key=889822014&conf=1338279579 IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text Size 2.6 kB (2648 bytes) Hash 808d17904270dbb23a8753570584524c 9175904f64efac4344d5694ed3f1d7c0940a4df0 e4d9c44c7e43fa0a5593c018e2d9f38d59f60b107ddb923bef8a0c7584681a6f HTTP Headers `GET /teams/?key=889822014&conf=1338279579 HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1` `HTTP/1.1 200 OK Content-Type: text/html Content-Encoding: gzip Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-2660" Vary: Accept-Encoding Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 2648`

	r3.o.lencr.org/	95.101.11.115	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 95.101.11.115:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 7af19a5145a4ee99bdf18831bad04bfd 7bdd2a4785b999ef54a2644211d2b2b7190fb8e1 3237bf0111ecdec3615c4d2d49a602f48f800335d0194f52b600bdaefbd63ed0 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "3237BF0111ECDEC3615C4D2D49A602F48F800335D0194F52B600BDAEFBD63ED0" Last-Modified: Thu, 30 Mar 2023 02:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2890 Expires: Fri, 31 Mar 2023 10:25:12 GMT Date: Fri, 31 Mar 2023 09:37:02 GMT Connection: keep-alive`

	r3.o.lencr.org/	95.101.11.115	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 95.101.11.115:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 8e0c84bb4c8b23c3953fa21ed9609304 bba386505b766cebba17189ebe8219b2a644ce28 303be01b154868d266380af88c77b7db1c9b427540e19d4927b42364e9adcb23 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "303BE01B154868D266380AF88C77B7DB1C9B427540E19D4927B42364E9ADCB23" Last-Modified: Thu, 30 Mar 2023 15:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5909 Expires: Fri, 31 Mar 2023 11:15:31 GMT Date: Fri, 31 Mar 2023 09:37:02 GMT Connection: keep-alive`

	getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30	34.120.5.221	200 OK	52 kB
URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30 IP 34.120.5.221:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators Size 52 kB (51538 bytes) Hash 537dc7e8ab33036cd6a488b1c8c43b7d 6bbf04658a59fbfdfe6a8d186a12aebc14f965ad 6a6512651ea4d718b26beea06cbe0efd5e7bee3ccf98b7c5d3db63e1cebbf43e HTTP Headers `GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30 HTTP/1.1 Host: getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK server: nginx content-location: global-recs.php tcn: choice x-frame-options: SAMEORIGIN status: 200 OK x-source: Pocket pragma: cache p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE" x-cache: Hit from cloudfront x-amz-cf-pop: SEA73-P2 x-amz-cf-id: 6YnVtbOAoYp5FCenu5a5GuadnAm5tA2a_0xgCyML-qAMjnmAYMfyMw== content-encoding: gzip via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 google content-length: 51538 date: Fri, 31 Mar 2023 09:31:27 GMT age: 766 content-type: application/json vary: Accept-Encoding cache-control: s-maxage=900,public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2

	r3.o.lencr.org/	95.101.11.115	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 95.101.11.115:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 76218c893040d958ae1c4231cdd2133c 6a7b336dee91d4aec26ace0a5883ecdfac52e68f d35492b04d16ed00e9e195e7c84c99aa6a2b8a93abeb656baae0918986f0a7e4 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "D35492B04D16ED00E9E195E7C84C99AA6A2B8A93ABEB656BAAE0918986F0A7E4" Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3340 Expires: Fri, 31 Mar 2023 10:32:42 GMT Date: Fri, 31 Mar 2023 09:37:02 GMT Connection: keep-alive`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Fri, 31 Mar 2023 09:37:02 GMT content-type: application/json content-length: 12 access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-expose-headers: content-type strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: +Y7TWhgsJ5YeS9ySBZhhfysjEj+QEFtRR2VvuBcRJmWhBnQWgZRqEO2+WhXZ9pxJj+q4YBWLLbI= x-amz-request-id: 6R6QNPZYCXRF6BQV content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 31 Mar 2023 09:06:30 GMT age: 1833 last-modified: Fri, 30 Sep 2022 18:50:55 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	95.101.11.115	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 95.101.11.115:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash b93010cbf31ba3ec785b4088e5d0f529 c0f1ab8a2aae3c445a8f24959a4eea433a345caf 2cc1a5865dee7636b82a68deddd3aff8b697e846e37789a694cc3c7c47340590 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "2CC1A5865DEE7636B82A68DEDDD3AFF8B697E846E37789A694CC3C7C47340590" Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11545 Expires: Fri, 31 Mar 2023 12:49:28 GMT Date: Fri, 31 Mar 2023 09:37:03 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash bc86ef2a0cee04915bc360f5821adc8f 3658f9028cce204d38f7f48fcfaa2a8e4f54383a aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454 HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Backoff, Content-Length, Retry-After, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 31 Mar 2023 09:28:23 GMT content-type: application/json age: 520 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	dialin.plcm.vc/teams/js/pip.js	40.74.50.173	200 OK	169 B
URL HTTP/1.1 dialin.plcm.vc/teams/js/pip.js IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type ASCII text Size 169 B (169 bytes) Hash 1bf9cfdd37e7423d2bea49f180e0caa9 6051c25bdeac1b08b19d1e0c3258a404a895b27c a78c92fd51a4b5ab8bf453dee6d86edbac69fe63167c1dc4eeecea2c3ceffb87 HTTP Headers `GET /teams/js/pip.js HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Fri, 31 Mar 2023 02:19:09 GMT Accept-Ranges: bytes ETag: "6426431d-41" Vary: Accept-Encoding Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 169`

	dialin.plcm.vc/vendor/jquery_i18n/jquery.i18n.js	40.74.50.173	200 OK	3.7 kB
URL HTTP/1.1 dialin.plcm.vc/vendor/jquery_i18n/jquery.i18n.js IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type ASCII text Size 3.7 kB (3682 bytes) Hash 8fe77162d733473171e60bcf9821d2c5 104f7a620b304ca42fa9236bd3493a6703fa89ae dfbd1efece2ef644650f4096479bfa188f1f1bf1045c26f62380242fb1e9076f HTTP Headers `GET /vendor/jquery_i18n/jquery.i18n.js HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-21b6" Vary: Accept-Encoding Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 3682`

	code.jquery.com/jquery-3.1.1.min.js	69.16.175.10	200 OK	30 kB
URL HTTP/2 code.jquery.com/jquery-3.1.1.min.js IP 69.16.175.10:0 ASN #20446 STACKPATH-CDN File type ASCII text, with very long lines (32030) Size 30 kB (30070 bytes) Hash f7a4a283c6a5130b43ce8de3b7842078 ef243edbb67f9e50f8589885e4541f6c919ea8d7 aee9e5b2534ced87fe1e02a1a9e661468ba548e02edacbe9b68b3b247607dc4e HTTP Headers `GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dialin.plcm.vc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK date: Fri, 31 Mar 2023 09:37:03 GMT content-encoding: gzip content-length: 30070 content-type: application/javascript; charset=utf-8 last-modified: Fri, 20 Aug 2021 17:47:53 GMT accept-ranges: bytes server: nginx etag: W/"611feac9-152b5" cache-control: max-age=315360000, public access-control-allow-origin: * vary: Accept-Encoding x-hw: 1680255423.dop223.sk1.t,1680255423.cds255.sk1.hn,1680255423.cds010.sk1.c X-Firefox-Spdy: h2`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 7117d0725779b203269d6c54c3ccedcf 24f4e806fd15c39484288a88c67117c918ce0829 ecfdfee4723c973d404d5e580a8cead357de755354328bfa40c1041350a76504 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 31 Mar 2023 09:37:03 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	dialin.plcm.vc/vendor/jquery_i18n/CLDRPluralRuleParser.js	40.74.50.173	200 OK	4.5 kB
URL HTTP/1.1 dialin.plcm.vc/vendor/jquery_i18n/CLDRPluralRuleParser.js IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type Unicode text, UTF-8 text Size 4.5 kB (4520 bytes) Hash 44698af0f3ac563ba31b0586e1e99c53 d1b7a9d644d6ebbaa72cc6c1ef752fc2ff801c1b 10ff4bdfc81399f221b4883c5c625137f8972a932bdeffbb7bac5b79fc9225f5 HTTP Headers `GET /vendor/jquery_i18n/CLDRPluralRuleParser.js HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-38b7" Vary: Accept-Encoding Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 4520`

	dialin.plcm.vc/teams/js/dialin.js	40.74.50.173	200 OK	2.0 kB
URL HTTP/1.1 dialin.plcm.vc/teams/js/dialin.js IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type ASCII text Size 2.0 kB (1993 bytes) Hash 0751365dcf1b17b04f52fe38d250a0f4 12c6f9cfbbb1ce6532e1498b79efddfb5d0dea72 a97e47883339c1b50ec4b9f039ff4da7dc74c6e9bfef1a0b295790eeebbbc9de HTTP Headers `GET /teams/js/dialin.js HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/javascript Content-Encoding: gzip Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-1352" Vary: Accept-Encoding Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1993`

	dialin.plcm.vc/index.css	40.74.50.173	200 OK	1.2 kB
URL HTTP/1.1 dialin.plcm.vc/index.css IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type ASCII text Size 1.2 kB (1166 bytes) Hash db070912a8ef9b6e89cc8da261a59c0d 8b968cc8fee87c3389095e6c2ecc4de6ab8f3ccf e35dbf0bb5ba36d82dfae6e55dfad95821a5550c851429fe957dd5597cda0cc7 HTTP Headers `GET /index.css HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-b3f" Vary: Accept-Encoding Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1166`

	dialin.plcm.vc/poly-dark-bg.svg	40.74.50.173	200 OK	1.6 kB
URL HTTP/1.1 dialin.plcm.vc/poly-dark-bg.svg IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1039) Size 1.6 kB (1586 bytes) Hash 4f183de6565c0761832800940121acfa 3fe25981161050c78bec0cb641a14cc81ca09951 16021f19ae1d323bd613e5b150ee62ca820c3979ef904083de10131ad51f3cb4 HTTP Headers `GET /poly-dark-bg.svg HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-632" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1586`

	detectportal.firefox.com/success.txt?ipv4	34.107.221.82	200 OK	8 B
URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4 IP 34.107.221.82:0 ASN #15169 GOOGLE File type ASCII text Size 8 B (8 bytes) Hash ae780585f49b94ce1444eb7d28906123 7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5 HTTP Headers `GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 30 Mar 2023 13:52:43 GMT Age: 71060 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash 7117d0725779b203269d6c54c3ccedcf 24f4e806fd15c39484288a88c67117c918ce0829 ecfdfee4723c973d404d5e580a8cead357de755354328bfa40c1041350a76504 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 31 Mar 2023 09:37:03 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash bf29feb5d124115ffaf0b00e89ab0309 693d2ad3694d3171af6545ef4758855127b2e669 40c67d04ae6c3d13fd0a77cf0c804660a5498d0c24425162f8e21c86d9e85eb1 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 31 Mar 2023 09:37:03 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2	216.58.207.227	200 OK	17 kB
URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2 IP 216.58.207.227:0 ASN #15169 GOOGLE File type Web Open Font Format (Version 2), TrueType, length 16748, version 1.0\012- data Size 17 kB (16748 bytes) Hash 62d24b94de2fd801742f49d8c6306ba2 d4b841b136adad3051b58a66692f7c5942cf6deb 1b2f88142c19df560f487368810bba2d41c5d6948df584abaa2e0091c0b2245b HTTP Headers GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4gaVI.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://dialin.plcm.vc Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 16748 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Tue, 28 Mar 2023 10:33:54 GMT expires: Wed, 27 Mar 2024 10:33:54 GMT cache-control: public, max-age=31536000 last-modified: Mon, 15 Aug 2022 18:14:43 GMT content-type: font/woff2 age: 255789 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4kaVIGxA.woff2	216.58.207.227	200 OK	11 kB
URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4kaVIGxA.woff2 IP 216.58.207.227:0 ASN #15169 GOOGLE File type Web Open Font Format (Version 2), TrueType, length 10628, version 1.0\012- data Size 11 kB (10628 bytes) Hash 1bfb5b86ca92fbd3673b83c5d031337e 8ea714a65af79a9a72f88e908a158662aecba8c3 4663ff1019b4b07b0edfe3f998056205ba15fdf16ef7aab4e911daed8dbd98b0 HTTP Headers GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsiH0B4kaVIGxA.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: https://dialin.plcm.vc Connection: keep-alive Referer: https://fonts.googleapis.com/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 10628 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Fri, 24 Mar 2023 10:29:17 GMT expires: Sat, 23 Mar 2024 10:29:17 GMT cache-control: public, max-age=31536000 last-modified: Mon, 15 Aug 2022 18:11:22 GMT content-type: font/woff2 age: 601666 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	dialin.plcm.vc/teams/i18n/dialin-en.json	40.74.50.173	200 OK	1.5 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-en.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, ASCII text Size 1.5 kB (1538 bytes) Hash 2f80a4c5bef95e6db0e41ac1d9e03530 a57b6ec9d79aee83e489b6357fa38be8e4c46a3f 88a19ffe95d3b45a6e88bf44ced08b0bfdc91ec104886ef7a0456c69cfc01870 HTTP Headers `GET /teams/i18n/dialin-en.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-602" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1538`

	dialin.plcm.vc/teams/i18n/dialin-de.json	40.74.50.173	200 OK	1.7 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-de.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, Unicode text, UTF-8 text Size 1.7 kB (1710 bytes) Hash 58c850e06743e3f93c71357ac6ab4573 45c4c718adda6a2b530b8024a6f908e1201dda1f b1a698d7e2b3e5b9dfbf00b2a9567ca513470727bc5e5fe9222fd6d20f3824db HTTP Headers `GET /teams/i18n/dialin-de.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-6ae" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1710`

	dialin.plcm.vc/teams/i18n/dialin-en.json	40.74.50.173	200 OK	1.5 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-en.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, ASCII text Size 1.5 kB (1538 bytes) Hash 2f80a4c5bef95e6db0e41ac1d9e03530 a57b6ec9d79aee83e489b6357fa38be8e4c46a3f 88a19ffe95d3b45a6e88bf44ced08b0bfdc91ec104886ef7a0456c69cfc01870 HTTP Headers `GET /teams/i18n/dialin-en.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-602" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1538`

	dialin.plcm.vc/teams/i18n/dialin-es_ES.json	40.74.50.173	200 OK	1.8 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-es_ES.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, Unicode text, UTF-8 text Size 1.8 kB (1763 bytes) Hash c44f2b16a838030b030c110eeecffcf1 71998be56f6665706ac19bc11d097bac9cac3c68 75570d9abc6facf27fb3992e5e804b495f275f3de7a1cb25bec05eeea29618eb HTTP Headers `GET /teams/i18n/dialin-es_ES.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-6e3" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1763`

	dialin.plcm.vc/teams/i18n/dialin-es_ES.json	40.74.50.173	200 OK	1.8 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-es_ES.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, Unicode text, UTF-8 text Size 1.8 kB (1763 bytes) Hash c44f2b16a838030b030c110eeecffcf1 71998be56f6665706ac19bc11d097bac9cac3c68 75570d9abc6facf27fb3992e5e804b495f275f3de7a1cb25bec05eeea29618eb HTTP Headers `GET /teams/i18n/dialin-es_ES.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-6e3" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1763`

	dialin.plcm.vc/teams/i18n/dialin-fr.json	40.74.50.173	200 OK	1.8 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-fr.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, Unicode text, UTF-8 text Size 1.8 kB (1840 bytes) Hash 1ce9d2c8eac3a1a2cf1699b45176f60b a4b62ea7f56a281ad468455ad0366b6baf14a8cd e1465629817c7ebe5ef127e4ec9dce63bb52695c39acc1174bc78f7a6c8c3bb9 HTTP Headers `GET /teams/i18n/dialin-fr.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-730" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1840`

	dialin.plcm.vc/teams/i18n/dialin-it.json	40.74.50.173	200 OK	1.8 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-it.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, Unicode text, UTF-8 text Size 1.8 kB (1754 bytes) Hash f676f56eba86456f4e3dab930e288b3d 79d6909eb10d9735f25d0c458665f5bece167b27 d2176afdc4e1f7d7e91da4bcc551c3a3d96e9569aec33a9292f464afa98f8303 HTTP Headers `GET /teams/i18n/dialin-it.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-6da" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1754`

	maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css	104.18.10.207	200 OK	22 kB
URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0 ASN #13335 CLOUDFLARENET File type ASCII text, with very long lines (65371) Size 22 kB (22060 bytes) Hash 0af420f716af0257eb4b1eef0802502a 86d2ebab918ae201d59aa7202f1d6b4a57c38814 f8d062a915f532fae8177d6924bd860c11c0f97cb9aa84c037cf56c1cf0de316 HTTP Headers `GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://dialin.plcm.vc Connection: keep-alive Referer: https://dialin.plcm.vc/ Sec-Fetch-Dest: style Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK date: Fri, 31 Mar 2023 09:37:03 GMT content-type: text/css; charset=utf-8 vary: Accept-Encoding cdn-pullzone: 252412 cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74 cdn-requestcountrycode: DE cdn-edgestorageid: 632, 617, 617, 617 last-modified: Mon, 25 Jan 2021 22:03:59 GMT cdn-cachedat: 2021-06-08 21:21:23 cdn-requestpullsuccess: True cdn-requestpullcode: 200 cache-control: public, max-age=31919000 timing-allow-origin: * cross-origin-resource-policy: cross-origin access-control-allow-origin: * x-content-type-options: nosniff cdn-requestid: 756b9d3545a7519368b1ec98570a8826 cdn-status: 200 cdn-cache: HIT cf-cache-status: HIT age: 400001 strict-transport-security: max-age=31536000; includeSubDomains; preload server: cloudflare cf-ray: 7b079c8aa842fabc-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2

	dialin.plcm.vc/teams/i18n/dialin-pt_BR.json	40.74.50.173	200 OK	1.7 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-pt_BR.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, Unicode text, UTF-8 text Size 1.7 kB (1705 bytes) Hash efc6ff292da9aba3f1ad8a9f75cc6946 d34780edd55a64c7eda29f6a5e8af2f26d07d7d2 823105bff2defff3ad3ded1049b43fadb1d0483c8e5a178b7bae15909b5bb052 HTTP Headers `GET /teams/i18n/dialin-pt_BR.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-6a9" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1705`

	dialin.plcm.vc/teams/i18n/dialin-pt_BR.json	40.74.50.173	200 OK	1.7 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-pt_BR.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, Unicode text, UTF-8 text Size 1.7 kB (1705 bytes) Hash efc6ff292da9aba3f1ad8a9f75cc6946 d34780edd55a64c7eda29f6a5e8af2f26d07d7d2 823105bff2defff3ad3ded1049b43fadb1d0483c8e5a178b7bae15909b5bb052 HTTP Headers `GET /teams/i18n/dialin-pt_BR.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-6a9" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1705`

	dialin.plcm.vc/teams/i18n/dialin-ko.json	40.74.50.173	200 OK	1.7 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-ko.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, Unicode text, UTF-8 text Size 1.7 kB (1749 bytes) Hash aaebbde16709bbb87fde9bdfa46174a3 fbcdb102970989216e72d96f1bf9c6179da6c708 07434cd9a2c3983c960d9122f243088b0c02690da77960772dcda6064cc075f9 HTTP Headers `GET /teams/i18n/dialin-ko.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-6d5" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1749`

	ocsp.pki.goog/gts1c3	216.58.211.3	200 OK	471 B
URL HTTP/1.1 ocsp.pki.goog/gts1c3 IP 216.58.211.3:0 ASN #15169 GOOGLE File type data Size 471 B (471 bytes) Hash bf29feb5d124115ffaf0b00e89ab0309 693d2ad3694d3171af6545ef4758855127b2e669 40c67d04ae6c3d13fd0a77cf0c804660a5498d0c24425162f8e21c86d9e85eb1 HTTP Headers `POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 31 Mar 2023 09:37:03 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN`

	dialin.plcm.vc/teams/i18n/dialin-ru.json	40.74.50.173	200 OK	2.3 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-ru.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- , Unicode text, UTF-8 text Size 2.3 kB (2283 bytes) Hash fb508289b84c47793776a1f80eef853f 9d8439608a1e3b9b91d017aaf6ce859323592a65 79548d0b1b998cc25faf514d91b0d0ed04c5c89b7e3ec9c4d821231f77ce00ac HTTP Headers `GET /teams/i18n/dialin-ru.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-8eb" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 2283`

	dialin.plcm.vc/teams/i18n/dialin-zh.json	40.74.50.173	200 OK	1.5 kB
URL HTTP/1.1 dialin.plcm.vc/teams/i18n/dialin-zh.json IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type JSON data\012- HTML document, Unicode text, UTF-8 text Size 1.5 kB (1532 bytes) Hash 3adf4f8929489d36d4f48fc5a78e6d5d ee90630052e0d8899d281526fe8a05c1fbcbc670 c6d9cb64a612dd202e6eed5d615156d26f5a68152bdce9cfd137500c99e3a22b HTTP Headers `GET /teams/i18n/dialin-zh.json HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-5fc" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 1532`

	r3.o.lencr.org/	95.101.11.115	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 95.101.11.115:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash ab61862f016dea85f8aa55e59369d905 a5e81f13052b9e9184caf05a9740c345a40d1f22 e0d580c313088d524a5338e63e4acf9f3f3cb45a54f2528c5d1c4915d71b255b HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "E0D580C313088D524A5338E63E4ACF9F3F3CB45A54F2528C5D1C4915D71B255B" Last-Modified: Thu, 30 Mar 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6960 Expires: Fri, 31 Mar 2023 11:33:03 GMT Date: Fri, 31 Mar 2023 09:37:03 GMT Connection: keep-alive`

	dialin.plcm.vc/favicon.ico	40.74.50.173	200 OK	5.7 kB
URL HTTP/1.1 dialin.plcm.vc/favicon.ico IP 40.74.50.173:0 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK File type MS Windows icon resource - 2 icons, 16x16, 8 bits/pixel, 32x32, 32 bits/pixel\012- data Size 5.7 kB (5686 bytes) Hash 1c61fe6a5750d9650b4bb371609b22d4 92d2fbd829f022c4900e7ffac3a485c7ed0d35f3 0caa41b9e2b4705bb141ccbf2eda02f8f97b724555050bdcea735d6fc1258373 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: dialin.plcm.vc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dialin.plcm.vc/teams/?key=889822014&conf=1338279579 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin` `HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Wed, 05 Oct 2022 00:13:32 GMT Accept-Ranges: bytes ETag: "633ccc2c-1636" Server: openresty/1.13.6.1 X-Powered-By: diplomat/master-0.1.0-634528 Date: Fri, 31 Mar 2023 09:37:02 GMT Content-Length: 5686`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, Last-Modified, Alert, Backoff, Content-Type, ETag, Cache-Control, Retry-After, Expires, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Fri, 31 Mar 2023 09:17:26 GMT age: 1177 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	push.services.mozilla.com/	34.117.65.55	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 34.117.65.55:0 ASN #15169 GOOGLE File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: C2e5wJILEqPZo0Ke5IlqZg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: UQ6pXga4QHgXCKEXAk/cvd1mUl4= Date: Fri, 31 Mar 2023 09:37:03 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000`

	ocsp.digicert.com/	192.229.221.95	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 192.229.221.95:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash ba364e422ec1cdd9965876020d80075a a0d6d06766f9eeca919d90cc07a583385ca9a57a 40a50fd9ac56c5f069c960cda1469b628259321f560177d7aadb04b1a9f0014c HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1019 Cache-Control: max-age=110124 Content-Type: application/ocsp-response Date: Fri, 31 Mar 2023 09:37:03 GMT Etag: "6425b0f0-1d7" Expires: Sat, 01 Apr 2023 16:12:27 GMT Last-Modified: Thu, 30 Mar 2023 15:55:28 GMT Server: ECAcc (ska/F7A5) X-Cache: HIT Content-Length: 471`

	firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221680253035824%22	35.241.9.150	200 OK	22 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221680253035824%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (22067), with no line terminators Size 22 kB (22067 bytes) Hash 72ee3ac0e3b0754ccb1c60bfd7cb4225 9d096f3f34ed12438ea9be6b8e16974d8a9d4726 a413a6aea012d044e5eabbf7920896558ef99c8830bfc5bc6616f8110c7904eb HTTP Headers `GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221680253035824%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Alert, Content-Length, Retry-After, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 22067 via: 1.1 google date: Fri, 31 Mar 2023 09:01:56 GMT last-modified: Fri, 31 Mar 2023 08:57:15 GMT content-type: application/json age: 2108 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1680201445669&_since=%221666204638208%22	35.241.9.150	200 OK	49 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1680201445669&_since=%221666204638208%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (48988), with no line terminators Size 49 kB (48988 bytes) Hash 6b4cb6acccb2e110978175dd713538d9 fdc93e3ac37e90c0206a5d58ab241f05f1367d2e ad955db5572d6dcee5dc2add8aab401a939b1d1631da31439a6464de13d2e985 HTTP Headers `GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1680201445669&_since=%221666204638208%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 48988 via: 1.1 google date: Fri, 31 Mar 2023 09:12:52 GMT age: 1452 last-modified: Thu, 30 Mar 2023 18:37:25 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2	54.148.4.3	200 OK	8 B
URL HTTP/1.1 shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2 IP 54.148.4.3:0 ASN #16509 AMAZON-02 File type ASCII text Size 8 B (8 bytes) Hash 29fc57841962e407cb50c1be60284bf7 ce968a77e2996da5eee8925182318f171ccdce47 ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b HTTP Headers `POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1 Host: shavar.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 773 Connection: close Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: none Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/octet-stream Date: Fri, 31 Mar 2023 09:37:04 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 8 Connection: Close`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash e7bace7c1e04d44012e37ddffe36e5d5 3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK x-amz-id-2: lsBpCzHlvoRHmRsqbX57jJhaDz4EovCoJt/TeJTTC+UWEm6dgQJ2ffUGpI9/yFFe6bZfVBzLqHU= x-amz-request-id: 20KBP4WNEE9S6439 x-amz-server-side-encryption: AES256 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 31 Mar 2023 09:03:17 GMT age: 2027 last-modified: Sat, 11 Mar 2023 16:53:15 GMT etag: "e7bace7c1e04d44012e37ddffe36e5d5" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash bc86ef2a0cee04915bc360f5821adc8f 3658f9028cce204d38f7f48fcfaa2a8e4f54383a aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454 HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Backoff, Content-Length, Retry-After, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 31 Mar 2023 09:28:23 GMT content-type: application/json age: 521 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	95.101.11.115	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 95.101.11.115:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 2ec385afa181e1e1a7ce863d2542058a 333bb036f3c246f9b72ed796abe3b558a96e961a a12dd5c27151128436b3711d161ec618c44ab2c729e42931175823c3b0ed2550 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "A12DD5C27151128436B3711D161EC618C44AB2C729E42931175823C3B0ED2550" Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8859 Expires: Fri, 31 Mar 2023 12:04:43 GMT Date: Fri, 31 Mar 2023 09:37:04 GMT Connection: keep-alive`

	firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin	34.111.73.144	200 OK	807 kB
URL HTTP/2 firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin IP 34.111.73.144:0 ASN #15169 GOOGLE File type data Size 807 kB (807180 bytes) Hash 914be443bdfbe8a1c3ded61e1c114bd6 4fe7c5ff83f6a29e6699f4cebc17550891504661 41b036d0c889509d547296b238027a063c313261ad52d5f7bb81922011791857 HTTP Headers `GET /staging/addons-bloomfilters/8038652a-6557-460a-858c-84f19a5a0987.bin HTTP/1.1 Host: firefox-settings-attachments.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK x-amz-id-2: aX5gtrfIvrlfrmzn3i+2IqLF7UX9w7+97NePjBD0nDkbKdNThX6dTz+ikiY9V5469opwv0s3KdQ= x-amz-request-id: 43ZG072S6Z1BYVFX x-amz-server-side-encryption: AES256 x-amz-version-id: K1ODzappZsD35qeu0OM5zvs_BP1eybj7 accept-ranges: bytes server: AmazonS3 content-length: 807180 via: 1.1 google date: Mon, 27 Mar 2023 13:47:07 GMT age: 330597 last-modified: Tue, 10 Jan 2023 12:38:46 GMT etag: "914be443bdfbe8a1c3ded61e1c114bd6" content-type: application/octet-stream cache-control: public,max-age=604800 alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/gfx/changeset?_expected=1680018554787&_since=%221643818378440%22	35.241.9.150	200 OK	10 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/gfx/changeset?_expected=1680018554787&_since=%221643818378440%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (10096), with no line terminators Size 10 kB (10096 bytes) Hash ceb5afa740b44e3ce7f4227d4b439113 c61643d28463d062f8ffee3b8ea1cd89cb7b5a6c 0a2f9b659d2e0c816d958925eba9ce4e1387ef3571542036b5c9641f0f364c26 HTTP Headers `GET /v1/buckets/blocklists/collections/gfx/changeset?_expected=1680018554787&_since=%221643818378440%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 10096 via: 1.1 google date: Fri, 31 Mar 2023 09:05:31 GMT age: 1893 last-modified: Tue, 28 Mar 2023 15:49:14 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1680220864618&_since=%221666483264567%22	35.241.9.150	200 OK	94 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1680220864618&_since=%221666483264567%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators Size 94 kB (94146 bytes) Hash 30ef6d29afd8fb02ac8fdabc46eba37a 0d7b0267bc99599e4f30e1076e445d0da2ae5218 7ebfcb79401043f5c220e744a103948531cc9ed95aec7fc0f11a876d556ae876 HTTP Headers GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1680220864618&_since=%221666483264567%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 94146 via: 1.1 google date: Fri, 31 Mar 2023 08:57:11 GMT age: 2393 last-modified: Fri, 31 Mar 2023 00:01:04 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1678922485545&_since=%221661199949574%22	35.241.9.150	200 OK	25 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1678922485545&_since=%221661199949574%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (25354), with no line terminators Size 25 kB (25354 bytes) Hash 1904d8293b5f2c002df47873f23e827b 3ad77fb86caaf84886bcd6a811e39c918ba39a34 7600832994dcc92fd44775fed282ca3fdf7baf4333d4ad8310ad0b50d5e010ce HTTP Headers `GET /v1/buckets/main/collections/search-config/changeset?_expected=1678922485545&_since=%221661199949574%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Alert, Content-Length, Retry-After, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 25354 via: 1.1 google date: Fri, 31 Mar 2023 09:12:07 GMT age: 1497 last-modified: Thu, 30 Mar 2023 16:36:43 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1680130245939&_since=%221666279968541%22	35.241.9.150	200 OK	71 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1680130245939&_since=%221666279968541%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type ASCII text, with very long lines (65536), with no line terminators Size 71 kB (71260 bytes) Hash 1cb5e8acb1eaa3c494afe656851003e0 c98665c9870b343135d1061880ab6ea91715e791 809036fd3df57822dac1a263f95920f8406d5b5f9fd7f195f3758ca451a6e3a6 HTTP Headers `GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1680130245939&_since=%221666279968541%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Content-Type, Alert, Retry-After, Content-Length content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 71260 via: 1.1 google date: Fri, 31 Mar 2023 09:12:55 GMT age: 1449 last-modified: Wed, 29 Mar 2023 22:50:46 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1678202119172&_since=%221662044085942%22	35.241.9.150	200 OK	7.0 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1678202119172&_since=%221662044085942%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (6983), with no line terminators Size 7.0 kB (6983 bytes) Hash 43e4ae012aa36f9b6a3297174b84121b 114a70a8f2dbe4fa305435ffd386d0bf93009b2e 414f92b77ac1003e257269744bc94665e94eb8932460df4d6b0b80ba8a9ddce1 HTTP Headers `GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1678202119172&_since=%221662044085942%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Alert, Content-Length, Retry-After, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 6983 via: 1.1 google date: Fri, 31 Mar 2023 08:58:31 GMT age: 2313 last-modified: Tue, 28 Mar 2023 16:36:47 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1678736907773&_since=%221656585893704%22	35.241.9.150	200 OK	1.6 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1678736907773&_since=%221656585893704%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (1646), with no line terminators Size 1.6 kB (1646 bytes) Hash 0530a1e9082b795cd4fd4c2b8bd25d70 3f0229439b1d96f80fcb6ab6b77a25feaa8775e9 84fac3b241036cfdcf0f5ded9e9a46d2b49eba4344b3db83755f7268ee21f553 HTTP Headers `GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1678736907773&_since=%221656585893704%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 1646 via: 1.1 google date: Fri, 31 Mar 2023 09:17:46 GMT age: 1158 last-modified: Tue, 28 Mar 2023 16:36:46 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258	35.241.9.150	200 OK	682 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (682), with no line terminators Size 682 B (682 bytes) Hash 1e047b83920b53efa84372fbf1a81bee e2404b9c4d03d1c58e71884919a54c2f9a3dedfd 7e9d0acd7bc581de92f53a81423bd582b348c3c871a02cd7b26229313d5e6013 HTTP Headers `GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Alert, Content-Type, Expires, Cache-Control, Content-Length, Retry-After, Last-Modified, Pragma, ETag, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 682 via: 1.1 google date: Fri, 31 Mar 2023 09:16:33 GMT age: 1231 last-modified: Sat, 25 Mar 2023 16:36:56 GMT etag: "1679762216708" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22	35.241.9.150	200 OK	1.3 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (1251), with no line terminators Size 1.3 kB (1251 bytes) Hash 544e218878f656b4373563a094716a70 ae8f7f0929f1f4cf0b28eb0a2b5943e148ca61a9 532f508ccf0e693debde8f684a0fd170c3296dfad6f1bb27c672c37af6c3e7a7 HTTP Headers `GET /v1/buckets/main/collections/language-dictionaries/changeset?_expected=1673270322227&_since=%221569410800356%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Content-Type, Alert, Retry-After, Content-Length content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 1251 via: 1.1 google date: Fri, 31 Mar 2023 08:48:09 GMT age: 2935 last-modified: Sat, 25 Mar 2023 16:36:46 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22	35.241.9.150	200 OK	1.7 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (1742), with no line terminators Size 1.7 kB (1742 bytes) Hash c6ffeaa329fe3d4b15ca88fc8d960a12 f3f1fbe76d66e7d72122d56efa5d47a660c758b3 0f4df13e808c9a2caa24aa9c2419b0b14f9a79514f32bedf2addb947dd285608 HTTP Headers `GET /v1/buckets/main/collections/password-recipes/changeset?_expected=1674595048726&_since=%221642005109349%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Content-Type, Alert, Retry-After, Content-Length content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 1742 via: 1.1 google date: Fri, 31 Mar 2023 08:50:30 GMT age: 2794 last-modified: Sat, 25 Mar 2023 16:36:45 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1675943045406&_since=%221657747510534%22	35.241.9.150	200 OK	2.4 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1675943045406&_since=%221657747510534%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (2387), with no line terminators Size 2.4 kB (2387 bytes) Hash 377da5cb5955db6a3bbed6eaf61e789a 64f5e967b2d903ad2934ab11a8c567dbf282b025 60fe6df1f2d1e2e1727f1b8d44c1102f86558928b4df9cd7a92569d04f8724cf HTTP Headers `GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1675943045406&_since=%221657747510534%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Backoff, Content-Length, Retry-After, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 2387 via: 1.1 google date: Fri, 31 Mar 2023 09:27:30 GMT age: 575 last-modified: Fri, 24 Mar 2023 16:36:46 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22	35.241.9.150	200 OK	772 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (772), with no line terminators Size 772 B (772 bytes) Hash 1150fc438e642be5635e3234834367d9 a421eab9d39f0fefd6a1f2ecda9fc11ceddb646c 2b980c60a311dafdf93d9983c4ed8ac7dea9f7ff61329ffb1e1a24d0909f3d15 HTTP Headers `GET /v1/buckets/main/collections/password-rules/changeset?_expected=1679600032742&_since=%221659924409785%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Alert, Content-Length, Retry-After, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 772 via: 1.1 google date: Fri, 31 Mar 2023 08:37:12 GMT age: 3593 last-modified: Thu, 23 Mar 2023 19:33:52 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22	35.241.9.150	200 OK	1.5 kB
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (1506), with no line terminators Size 1.5 kB (1506 bytes) Hash 318c328ba16a767b6d94b0cbfc1a8b4d 40dfca34d6034f7bdeb27801f3b485e001699c38 6293349b31e326d2e8e4001e780554226b24584f981cc1325d70e48fbfa69ed0 HTTP Headers `GET /v1/buckets/main/collections/cfr/changeset?_expected=1666894461944&_since=%221659547595259%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 1506 via: 1.1 google date: Fri, 31 Mar 2023 08:55:55 GMT age: 2470 last-modified: Thu, 23 Mar 2023 16:36:48 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	detectportal.firefox.com/success.txt?ipv4	34.107.221.82	200 OK	8 B
URL HTTP/1.1 detectportal.firefox.com/success.txt?ipv4 IP 34.107.221.82:0 ASN #15169 GOOGLE File type ASCII text Size 8 B (8 bytes) Hash ae780585f49b94ce1444eb7d28906123 7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5 HTTP Headers `GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Thu, 30 Mar 2023 13:52:43 GMT Age: 71062 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22	35.241.9.150	200 OK	935 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22 IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (935), with no line terminators Size 935 B (935 bytes) Hash 9122f99473d982e0cf08d156d80fa431 0c58a6dc78b365762e6cce14075639d4b5e12b15 5a12e97c12a31b264b4ff70f17bf92ed19aff7cd04029d71d913a37593e3d600 HTTP Headers `GET /v1/buckets/main/collections/message-groups/changeset?_expected=1670425599656&_since=%221665698079854%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 935 via: 1.1 google date: Fri, 31 Mar 2023 09:09:19 GMT age: 1666 last-modified: Thu, 23 Mar 2023 16:36:47 GMT content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	r3.o.lencr.org/	95.101.11.115	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 95.101.11.115:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 195589ff3c6c50463257f10da16de114 7119aeba010d5c5c224fa544feff6f1761739929 dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B" Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11003 Expires: Fri, 31 Mar 2023 12:40:28 GMT Date: Fri, 31 Mar 2023 09:37:05 GMT Connection: keep-alive`

	r3.o.lencr.org/	95.101.11.115	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 95.101.11.115:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 195589ff3c6c50463257f10da16de114 7119aeba010d5c5c224fa544feff6f1761739929 dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B" Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11003 Expires: Fri, 31 Mar 2023 12:40:28 GMT Date: Fri, 31 Mar 2023 09:37:05 GMT Connection: keep-alive`

	r3.o.lencr.org/	95.101.11.115	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 95.101.11.115:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 195589ff3c6c50463257f10da16de114 7119aeba010d5c5c224fa544feff6f1761739929 dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B" Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11003 Expires: Fri, 31 Mar 2023 12:40:28 GMT Date: Fri, 31 Mar 2023 09:37:05 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.33.119.27	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 195589ff3c6c50463257f10da16de114 7119aeba010d5c5c224fa544feff6f1761739929 dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B" Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13719 Expires: Fri, 31 Mar 2023 13:25:44 GMT Date: Fri, 31 Mar 2023 09:37:05 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0794d5a0-7014-425b-9ea0-5dca44ddb4dd.jpeg	34.120.237.76	200 OK	8.7 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0794d5a0-7014-425b-9ea0-5dca44ddb4dd.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 8.7 kB (8745 bytes) Hash ef54a1ed997cc09495edb102ccdf6803 f5637efb37b5eecff77e60e6bcf5f599991f334f fa76d7a82dc15baf02b207cea874d1332c20a0ebe1eea99929a6f2746608412c HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0794d5a0-7014-425b-9ea0-5dca44ddb4dd.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 8745 x-amzn-requestid: e1d8dab6-4c15-4752-b528-21854c93a11c x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CguJ5Hy5oAMFyAg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64235d72-4bd62c8472f7257a155b2a80;Sampled=0 x-amzn-remapped-date: Tue, 28 Mar 2023 21:34:42 GMT x-amz-cf-pop: SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: YJQbVC3HpHtLrNiTzsUmCOMIWgRik2lIhvpAz0DfmUNSznCXw6ipYw== via: 1.1 8f251d23da31b683c3c9d6fad6ca944c.cloudfront.net (CloudFront), 1.1 60b744e5b364d04abea9fa6686121242.cloudfront.net (CloudFront), 1.1 google date: Fri, 31 Mar 2023 06:47:32 GMT age: 10173 etag: "f5637efb37b5eecff77e60e6bcf5f599991f334f" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d531a5-067e-452b-8349-d9f2a461ba4a.jpeg	34.120.237.76	200 OK	9.1 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d531a5-067e-452b-8349-d9f2a461ba4a.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.1 kB (9055 bytes) Hash 1688ae550e5e9181de2448a9cade8a26 a46eb0cd75f46778dc802b648f7c391ce801c700 e717e6e64c928571506bc6d19e3d9ce19bea3292f01618a6d9ddbbaffe65ffd1 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d531a5-067e-452b-8349-d9f2a461ba4a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9055 x-amzn-requestid: aad4ce89-7ff3-484a-b644-ecda89a2ff16 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CnVW5EPJoAMFfFw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64260292-41fb44737ee678bc7c93b7ff;Sampled=0;lineage=69363f46:0 x-amzn-remapped-date: Thu, 30 Mar 2023 21:43:46 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Miss from cloudfront x-amz-cf-id: aCuRurszjWr-BePwsnPfCqMpfO2GaREtRvvFGiiywmfsuAGFRRK9sQ== via: 1.1 99db15345b0e5e7ad9c267ae999b8cf4.cloudfront.net (CloudFront), 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 google date: Fri, 31 Mar 2023 08:20:16 GMT age: 4609 etag: "a46eb0cd75f46778dc802b648f7c391ce801c700" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg	34.120.237.76	200 OK	9.9 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.9 kB (9859 bytes) Hash da174e6ccc9451c5071ba10eeb97f6f6 c38827a9ac1218768839877263e1f2984fbdc454 76da406c8ae8cd6ca8471928f3aec3876aed2c21bc10edc0fbdaef5c100c1030 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9859 x-amzn-requestid: c00efe5b-7fdb-445a-a924-75ddd461b72b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: COQPtHizoAMF7-Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641bfa64-3eb90ae703b78e8a06130540;Sampled=0 x-amzn-remapped-date: Thu, 23 Mar 2023 07:06:12 GMT x-amz-cf-pop: SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: nZfXy-IsoHliuLodEocEZlH-IvmIV9G-noSmSEU1wmuMPfBx3rLJ9w== via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google date: Fri, 31 Mar 2023 00:11:32 GMT age: 33933 etag: "c38827a9ac1218768839877263e1f2984fbdc454" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa12abd-bde1-4533-85ef-2cc555105c71.jpeg	34.120.237.76	200 OK	10 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa12abd-bde1-4533-85ef-2cc555105c71.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 10 kB (10323 bytes) Hash a3b5eaa5d578299f8a506df71865d4d5 99fc13dea248dd6316e4abe545c80ad9df9bc1cd 30baa165074984ba7de6fc42cd1959d63c3f17c8f5b7cfabd68511136ff9e4ac HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa12abd-bde1-4533-85ef-2cc555105c71.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 10323 x-amzn-requestid: 5851fc9d-f75e-4237-87de-45b881d1d553 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CnUnJEb4IAMFh8A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64260160-2003d3df2d802faa74ca5096;Sampled=0;lineage=69363f46:0 x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:40 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: 28pB4vd4QIm-Q7aEpaoOVhSU5Tw7HiZfViMfqJ_Jk4Z2KtoDOcaOrg== via: 1.1 0a166b53605851fe961f5a2952e5a748.cloudfront.net (CloudFront), 1.1 efcf7b9d0f917f9ebf314db03e52d9b6.cloudfront.net (CloudFront), 1.1 google date: Thu, 30 Mar 2023 21:59:58 GMT age: 41827 etag: "99fc13dea248dd6316e4abe545c80ad9df9bc1cd" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg	34.120.237.76	200 OK	6.4 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.4 kB (6380 bytes) Hash 8a2b8f737604b7983cf686c82599dc73 aa63be93c4cd641f09ce0d5144ef60aab21caed1 78835586bfd170fee7e6f70b2b426ed186f5aeae969459c6dcbf527ba9c0deec HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccede828-1c24-4287-bb00-f793263370cf.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6380 x-amzn-requestid: 0a129a69-0720-47a0-8b0e-b3200de24204 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CnUn6E19IAMF9SQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64260165-564474a42e79d1dc4eb9558f;Sampled=0;lineage=69363f46:0 x-amzn-remapped-date: Thu, 30 Mar 2023 21:38:45 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: 3paQf8BhyRcZoZNox8660Zyzz0WaiQxJuHmDbj4wpo-rgbDdkxrYgQ== via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google date: Thu, 30 Mar 2023 21:47:23 GMT age: 42582 etag: "aa63be93c4cd641f09ce0d5144ef60aab21caed1" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29b45e61-5c2e-4b1b-929e-70c72bde0787.jpeg	34.120.237.76	200 OK	11 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29b45e61-5c2e-4b1b-929e-70c72bde0787.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 11 kB (11114 bytes) Hash 211d737362f7cbcd8c77cee7d29fa2f5 668d1d80c88082928c6ca01fbf1ccbfcd079f64f 05672d4ab964a706c41d73b51592ca2425983e77544f08198dd2d3a7dcc5b3a1 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29b45e61-5c2e-4b1b-929e-70c72bde0787.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 11114 x-amzn-requestid: e9e6a6b5-e6e8-4ca4-9302-a1fc023a38af x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CkypoH5goAMF6Hw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6424fe3d-63c6c8465407f5dc26e9aced;Sampled=0;lineage=69363f46:0 x-amzn-remapped-date: Thu, 30 Mar 2023 03:13:01 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: HsI--rdD7nPKwY0W7f_eIm1y-oz6BbWkLea2jX-JmxY6_I8ncpD-cg== via: 1.1 8ead054384c1626556ee4410cad35692.cloudfront.net (CloudFront), 1.1 4c48e9fb20d53d40e9fe273dbdae1098.cloudfront.net (CloudFront), 1.1 google date: Fri, 31 Mar 2023 08:59:56 GMT age: 18596 etag: "668d1d80c88082928c6ca01fbf1ccbfcd079f64f" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js	104.18.10.207	200 OK	0 B
URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js IP 104.18.10.207:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash HTTP Headers `GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dialin.plcm.vc/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK date: Fri, 31 Mar 2023 09:37:03 GMT content-type: application/javascript; charset=utf-8 vary: Accept-Encoding cdn-pullzone: 252412 cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74 cdn-requestcountrycode: DE access-control-allow-origin: * cache-control: public, max-age=31919000 last-modified: Mon, 25 Jan 2021 22:04:00 GMT cdn-cachedat: 12/13/2021 20:18:53 cdn-edgestorageid: 755 cdn-requestpullcode: 200 cdn-requestpullsuccess: True timing-allow-origin: * cross-origin-resource-policy: cross-origin x-content-type-options: nosniff cdn-status: 200 cdn-proxyver: 1.02 cdn-requestid: 48135f30fbfcba704628453df5764d8f cdn-cache: HIT cf-cache-status: HIT age: 25704908 strict-transport-security: max-age=31536000; includeSubDomains; preload server: cloudflare cf-ray: 7b079c8abe101c06-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2

	fonts.googleapis.com/css?family=Open+Sans:300	142.250.74.138	200 OK	0 B
URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300 IP 142.250.74.138:0 ASN #15169 GOOGLE File type Size 0 B (0 bytes) Hash HTTP Headers `GET /css?family=Open+Sans:300 HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dialin.plcm.vc/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Fri, 31 Mar 2023 09:37:03 GMT date: Fri, 31 Mar 2023 09:37:03 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (75)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers