r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14119
Expires: Tue, 07 Feb 2023 04:48:19 GMT
Date: Tue, 07 Feb 2023 00:53:00 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6609
Expires: Tue, 07 Feb 2023 02:43:09 GMT
Date: Tue, 07 Feb 2023 00:53:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 00:34:06 GMT
content-type: application/json
age: 1134
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2349
Expires: Tue, 07 Feb 2023 01:32:09 GMT
Date: Tue, 07 Feb 2023 00:53:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: JJ2KCa9gCRAv0SRbI3xHeK+e7UxWbUjyFAZVZfZBtXy8sDmjPBxA+A3lEEVKlmSHqXl6F2qbrbU=
x-amz-request-id: 9P7GPEAJK0D0RE97
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 00:35:19 GMT
age: 1061
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ww1.overadmit.site/Latest_TV_Series.cfm?fp=pqcvPP7XAfouZ61iINoQ2rKN8IZ35c9uAFGktB/PBOSW6pcPgiSVCzrnvFc6E5FpgRwddBhMZXQdv2YaG71gKnIC4e0Vwwz2Ql4UKqxN61ZxOKsAYzGIAXTRKKbfWAFdsMDZCQjff23TerH3pd3fwvGIlFAGZJ%20CFMgOBuH6fdThVyzHp8cALXTbxw2yNx2AXm5/GmjswS0aVxG9HJFCWbpZ3Z5kK3yqah6Kr0RpcbSrXgVWC7r0w9wdtotxe%200SyRx/L3BPOL9/VjZBMeUkC42rDCaOYp%20dBoMnb9Ov18NaNl95Avmx7t3Fd/ARuGZr&yep=cpoLPwA2NJ6KxRuCLKkJqMUsTpLB/SG7VSTkRcl8vTCa6eHKwkuhFuCVgjIDEt9vz6rfxvVFs0tK3p4UBS2ZbqyBXphSaTxzVkOneSaoDYjSEMgDdfDwAAE0gIxY8lD/Ug50QOT2VrBlwkfTwlQxxcxQq8XdvLB8ip1BP2iBLjBAyJjCfSYSov1ATii3PNQvT3kjn35f3NR8m0Qx81DhIT1UjPbaU0kS9u1tcQm2gcBgbTmmmjfoNZPspZvhM8xqjt7D0FSfSS2e39gmaSQfcc68TpI6SZOU57ufEbeBqFuVwpzJICR7OnYHjPpAq2jzBwq5i7F2txLqqaJ9WBCtijkdXHfM4ju2latNy91b4VM8/yyrjN00B/UmJVn9tMceNxw/Z6hYQzqTI8gIR5OSYsmhAKJ18M7abKZcpsXxJw/temeBgKgZEQv3%20AkCXmWec1semLGPDS9jfkLLgU0y3VfCfBoRDZdQLktvrN1lMsSsAlYaHkb6Kkfz4gHc791ak5oWZQtO6apKmwacTOcolwBm8j73%20%20oiZvCGuSyWvccMn4hy4vQtjR2z7E7teELPyusIKT%20jN0LXV96Xepdwiexb3RE6XT3y3CFFuoAPdk73%20MVSyCI02wkMxxiq2F0Io17Ev3mhTWv1MWs48CbhfF9XfhJ34kteO%20JHAXKQJjYmhC8Bz4cn%20IjXJUfxcMJFeWyEU9QsfEeNBWCAjBXUVEn1V3DA3Ckg8MEKnQvpfk17jgvNO45iEvZk2i7n5Rc0VEE9RDCjNaM/KfeCzRNjeQnMSEdHrdaTzDep8GEV9Ez5ZB3RXRlRmJOlQAg1uii8323VdxbCOBFCIntaxyNd9CInVQ42I%204hbziyS2t17ImqT%20abUciFMZJPZM1tnZtgN9RsrqRgZlIjHjEY5fM384%20UHmOFJPxeCZqyNkDz/Q8JrTQkAjmrXsqB4BmFhm4HMXFaeO6DL9G1V1ZswC9/axMzTFeJeDa8Af1g3NIqKP4G0hbEPzKjn2Mq%204/eqviKEj1mnrCtVNPv6oEppM145T7eqgXrKrCsNXiIEsRJZ1vrCPvraL36eusLsYc7yC5VQItRE1RvFA%20MrHJnpPjdGkCW%20CzWIe2mRvW%202NKiaWW/0dn0KQk4dSlUij7Z5LtNJ6RAeKuIF5sDnWl5AnGhtIKyFBglTqhCD3n9y8/BI4LxSihTzSwlkhRasU26a1XB85gJ5iMbXk/kmve8fiK1i4X7Z8%20z1hZbuS23n1lVup0ax7OT1RJJqYUqYRjmP0MKjkbokPxfx728J3YnzKf//3rfL3pFvgQJFrsxmninYHNwWwsHyuuoqVKIusuw6kkc6HHulEOxJ/aSToiIpNbOKi7zgoBGUGNa79N2XyPYAEJx3XEqZ1j64d%20rUa3svQ7wZbv2PWm4w8SJHLsQcayDxR8lkfMlJlLDe5nmuJdxQFRmDiTKfkVWG/Xl2q1jSaOFKR7yksMPo7ANalSsauWEtu40G0ck3qvF%20juWoz7/P%20bjLVwvr%20nGuvxbDyt3r%20eZtoBN/4mrHYFmZvOiguLWKQ4lgpgOvzznIv%20FqJhIVpglsocvgHGrVlK/i4ba0yI/f4hdHh92/w0LBHfqojFIUCflnODJBYtI5b54rIStgvrkz1dVbYoEMJ9knjIg1yh0eX6Nha1DDvKwfFdb4NUvE%20FlnSKqKUlrURRumjf5H4M=>np=0>pp=0&kbetu=1&maxads=0&kld=1040&yprpnd=UHM6ofc%20mzTMdphcWy%20zzw==&_opnslfp=1&prvtof=bKVsmE5wIJ9R8bQtqU03m9zq203ABMrU0eziU%20HJJYA=&>np=0>pp=0&kt=210&&kbc=8922&ki=209984113&ktd=0&kld=1040&kp=2&bd=-8
208.91.196.145302 Found 0 B URL HTTP/1.1 ww1.overadmit.site/Latest_TV_Series.cfm?fp=pqcvPP7XAfouZ61iINoQ2rKN8IZ35c9uAFGktB/PBOSW6pcPgiSVCzrnvFc6E5FpgRwddBhMZXQdv2YaG71gKnIC4e0Vwwz2Ql4UKqxN61ZxOKsAYzGIAXTRKKbfWAFdsMDZCQjff23TerH3pd3fwvGIlFAGZJ%20CFMgOBuH6fdThVyzHp8cALXTbxw2yNx2AXm5/GmjswS0aVxG9HJFCWbpZ3Z5kK3yqah6Kr0RpcbSrXgVWC7r0w9wdtotxe%200SyRx/L3BPOL9/VjZBMeUkC42rDCaOYp%20dBoMnb9Ov18NaNl95Avmx7t3Fd/ARuGZr&yep=cpoLPwA2NJ6KxRuCLKkJqMUsTpLB/SG7VSTkRcl8vTCa6eHKwkuhFuCVgjIDEt9vz6rfxvVFs0tK3p4UBS2ZbqyBXphSaTxzVkOneSaoDYjSEMgDdfDwAAE0gIxY8lD/Ug50QOT2VrBlwkfTwlQxxcxQq8XdvLB8ip1BP2iBLjBAyJjCfSYSov1ATii3PNQvT3kjn35f3NR8m0Qx81DhIT1UjPbaU0kS9u1tcQm2gcBgbTmmmjfoNZPspZvhM8xqjt7D0FSfSS2e39gmaSQfcc68TpI6SZOU57ufEbeBqFuVwpzJICR7OnYHjPpAq2jzBwq5i7F2txLqqaJ9WBCtijkdXHfM4ju2latNy91b4VM8/yyrjN00B/UmJVn9tMceNxw/Z6hYQzqTI8gIR5OSYsmhAKJ18M7abKZcpsXxJw/temeBgKgZEQv3%20AkCXmWec1semLGPDS9jfkLLgU0y3VfCfBoRDZdQLktvrN1lMsSsAlYaHkb6Kkfz4gHc791ak5oWZQtO6apKmwacTOcolwBm8j73%20%20oiZvCGuSyWvccMn4hy4vQtjR2z7E7teELPyusIKT%20jN0LXV96Xepdwiexb3RE6XT3y3CFFuoAPdk73%20MVSyCI02wkMxxiq2F0Io17Ev3mhTWv1MWs48CbhfF9XfhJ34kteO%20JHAXKQJjYmhC8Bz4cn%20IjXJUfxcMJFeWyEU9QsfEeNBWCAjBXUVEn1V3DA3Ckg8MEKnQvpfk17jgvNO45iEvZk2i7n5Rc0VEE9RDCjNaM/KfeCzRNjeQnMSEdHrdaTzDep8GEV9Ez5ZB3RXRlRmJOlQAg1uii8323VdxbCOBFCIntaxyNd9CInVQ42I%204hbziyS2t17ImqT%20abUciFMZJPZM1tnZtgN9RsrqRgZlIjHjEY5fM384%20UHmOFJPxeCZqyNkDz/Q8JrTQkAjmrXsqB4BmFhm4HMXFaeO6DL9G1V1ZswC9/axMzTFeJeDa8Af1g3NIqKP4G0hbEPzKjn2Mq%204/eqviKEj1mnrCtVNPv6oEppM145T7eqgXrKrCsNXiIEsRJZ1vrCPvraL36eusLsYc7yC5VQItRE1RvFA%20MrHJnpPjdGkCW%20CzWIe2mRvW%202NKiaWW/0dn0KQk4dSlUij7Z5LtNJ6RAeKuIF5sDnWl5AnGhtIKyFBglTqhCD3n9y8/BI4LxSihTzSwlkhRasU26a1XB85gJ5iMbXk/kmve8fiK1i4X7Z8%20z1hZbuS23n1lVup0ax7OT1RJJqYUqYRjmP0MKjkbokPxfx728J3YnzKf//3rfL3pFvgQJFrsxmninYHNwWwsHyuuoqVKIusuw6kkc6HHulEOxJ/aSToiIpNbOKi7zgoBGUGNa79N2XyPYAEJx3XEqZ1j64d%20rUa3svQ7wZbv2PWm4w8SJHLsQcayDxR8lkfMlJlLDe5nmuJdxQFRmDiTKfkVWG/Xl2q1jSaOFKR7yksMPo7ANalSsauWEtu40G0ck3qvF%20juWoz7/P%20bjLVwvr%20nGuvxbDyt3r%20eZtoBN/4mrHYFmZvOiguLWKQ4lgpgOvzznIv%20FqJhIVpglsocvgHGrVlK/i4ba0yI/f4hdHh92/w0LBHfqojFIUCflnODJBYtI5b54rIStgvrkz1dVbYoEMJ9knjIg1yh0eX6Nha1DDvKwfFdb4NUvE%20FlnSKqKUlrURRumjf5H4M=>np=0>pp=0&kbetu=1&maxads=0&kld=1040&yprpnd=UHM6ofc%20mzTMdphcWy%20zzw==&_opnslfp=1&prvtof=bKVsmE5wIJ9R8bQtqU03m9zq203ABMrU0eziU%20HJJYA=&>np=0>pp=0&kt=210&&kbc=8922&ki=209984113&ktd=0&kld=1040&kp=2&bd=-8
IP 208.91.196.145:0
ASN #40034 CONFLUENCE-NETWORK-INC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Latest_TV_Series.cfm?fp=pqcvPP7XAfouZ61iINoQ2rKN8IZ35c9uAFGktB/PBOSW6pcPgiSVCzrnvFc6E5FpgRwddBhMZXQdv2YaG71gKnIC4e0Vwwz2Ql4UKqxN61ZxOKsAYzGIAXTRKKbfWAFdsMDZCQjff23TerH3pd3fwvGIlFAGZJ%20CFMgOBuH6fdThVyzHp8cALXTbxw2yNx2AXm5/GmjswS0aVxG9HJFCWbpZ3Z5kK3yqah6Kr0RpcbSrXgVWC7r0w9wdtotxe%200SyRx/L3BPOL9/VjZBMeUkC42rDCaOYp%20dBoMnb9Ov18NaNl95Avmx7t3Fd/ARuGZr&yep=cpoLPwA2NJ6KxRuCLKkJqMUsTpLB/SG7VSTkRcl8vTCa6eHKwkuhFuCVgjIDEt9vz6rfxvVFs0tK3p4UBS2ZbqyBXphSaTxzVkOneSaoDYjSEMgDdfDwAAE0gIxY8lD/Ug50QOT2VrBlwkfTwlQxxcxQq8XdvLB8ip1BP2iBLjBAyJjCfSYSov1ATii3PNQvT3kjn35f3NR8m0Qx81DhIT1UjPbaU0kS9u1tcQm2gcBgbTmmmjfoNZPspZvhM8xqjt7D0FSfSS2e39gmaSQfcc68TpI6SZOU57ufEbeBqFuVwpzJICR7OnYHjPpAq2jzBwq5i7F2txLqqaJ9WBCtijkdXHfM4ju2latNy91b4VM8/yyrjN00B/UmJVn9tMceNxw/Z6hYQzqTI8gIR5OSYsmhAKJ18M7abKZcpsXxJw/temeBgKgZEQv3%20AkCXmWec1semLGPDS9jfkLLgU0y3VfCfBoRDZdQLktvrN1lMsSsAlYaHkb6Kkfz4gHc791ak5oWZQtO6apKmwacTOcolwBm8j73%20%20oiZvCGuSyWvccMn4hy4vQtjR2z7E7teELPyusIKT%20jN0LXV96Xepdwiexb3RE6XT3y3CFFuoAPdk73%20MVSyCI02wkMxxiq2F0Io17Ev3mhTWv1MWs48CbhfF9XfhJ34kteO%20JHAXKQJjYmhC8Bz4cn%20IjXJUfxcMJFeWyEU9QsfEeNBWCAjBXUVEn1V3DA3Ckg8MEKnQvpfk17jgvNO45iEvZk2i7n5Rc0VEE9RDCjNaM/KfeCzRNjeQnMSEdHrdaTzDep8GEV9Ez5ZB3RXRlRmJOlQAg1uii8323VdxbCOBFCIntaxyNd9CInVQ42I%204hbziyS2t17ImqT%20abUciFMZJPZM1tnZtgN9RsrqRgZlIjHjEY5fM384%20UHmOFJPxeCZqyNkDz/Q8JrTQkAjmrXsqB4BmFhm4HMXFaeO6DL9G1V1ZswC9/axMzTFeJeDa8Af1g3NIqKP4G0hbEPzKjn2Mq%204/eqviKEj1mnrCtVNPv6oEppM145T7eqgXrKrCsNXiIEsRJZ1vrCPvraL36eusLsYc7yC5VQItRE1RvFA%20MrHJnpPjdGkCW%20CzWIe2mRvW%202NKiaWW/0dn0KQk4dSlUij7Z5LtNJ6RAeKuIF5sDnWl5AnGhtIKyFBglTqhCD3n9y8/BI4LxSihTzSwlkhRasU26a1XB85gJ5iMbXk/kmve8fiK1i4X7Z8%20z1hZbuS23n1lVup0ax7OT1RJJqYUqYRjmP0MKjkbokPxfx728J3YnzKf//3rfL3pFvgQJFrsxmninYHNwWwsHyuuoqVKIusuw6kkc6HHulEOxJ/aSToiIpNbOKi7zgoBGUGNa79N2XyPYAEJx3XEqZ1j64d%20rUa3svQ7wZbv2PWm4w8SJHLsQcayDxR8lkfMlJlLDe5nmuJdxQFRmDiTKfkVWG/Xl2q1jSaOFKR7yksMPo7ANalSsauWEtu40G0ck3qvF%20juWoz7/P%20bjLVwvr%20nGuvxbDyt3r%20eZtoBN/4mrHYFmZvOiguLWKQ4lgpgOvzznIv%20FqJhIVpglsocvgHGrVlK/i4ba0yI/f4hdHh92/w0LBHfqojFIUCflnODJBYtI5b54rIStgvrkz1dVbYoEMJ9knjIg1yh0eX6Nha1DDvKwfFdb4NUvE%20FlnSKqKUlrURRumjf5H4M=>np=0>pp=0&kbetu=1&maxads=0&kld=1040&yprpnd=UHM6ofc%20mzTMdphcWy%20zzw==&_opnslfp=1&prvtof=bKVsmE5wIJ9R8bQtqU03m9zq203ABMrU0eziU%20HJJYA=&>np=0>pp=0&kt=210&&kbc=8922&ki=209984113&ktd=0&kld=1040&kp=2&bd=-8 HTTP/1.1
Host: ww1.overadmit.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 07 Feb 2023 00:53:00 GMT
Server: Apache
Location: http://ww1.overadmit.site/
Content-Length: 0
Keep-Alive: timeout=5, max=126
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 00:53:00 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Expires, Pragma, Retry-After, Last-Modified, ETag, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 00:07:20 GMT
age: 2740
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11666
Expires: Tue, 07 Feb 2023 04:07:27 GMT
Date: Tue, 07 Feb 2023 00:53:01 GMT
Connection: keep-alive
push.services.mozilla.com/
54.149.129.99101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.129.99:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sPrtvuP9C7eDsKd+cp3HRA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 06NnN3HMW7HEQA9O/LMAVqo4Uzc=
ww1.overadmit.site/
208.91.196.145200 OK 940 B IP 208.91.196.145:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (436), with CRLF line terminators
Hash 38882a6e65d8395b8f95e4333796aa24
119b4cf7c34cbccedf283436ae9d1c9f4c72f445
a8c6fb4ebce4be8b64d0e5e331490899833f49a2cb629122e5eb14f753e6d804
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: ww1.overadmit.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 00:53:00 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_cTWN/VJus8vFqvORBTnaHhliZGd4bcOqZe5grhA3DmLp7d0dILlrf4Qvbz3OmfqhRBWcE70oNHr5kGMpqvsIWQ==
Cteonnt-Length: 2021
Keep-Alive: timeout=5, max=121
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Cache-Control: private
Content-Encoding: gzip
Content-Length: 940
ww1.overadmit.site/favicon.ico
208.91.196.145404 Not Found 30 B URL HTTP/1.1 ww1.overadmit.site/favicon.ico
IP 208.91.196.145:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type ASCII text, with no line terminators
Hash c4609c83d6054d974c265b208bdc2a21
7e963e7185900347babd1f2797312c0ca21fa4ae
6cd85e3008758f2e06eeff9efdf9b4ad2981f6654f87918d155b0aced68d959a
GET /favicon.ico HTTP/1.1
Host: ww1.overadmit.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.overadmit.site/
Connection: keep-alive
Cookie: isframesetenabled=1
HTTP/1.1 404 Not Found
Date: Tue, 07 Feb 2023 00:53:02 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
ntCoent-Length: 10
Keep-Alive: timeout=5, max=124
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
Cache-Control: private
Content-Encoding: gzip
Content-Length: 30
ww1.overadmit.site/?fp=pqcvPP7XAfouZ61iINoQ2gIQlEC%2BHxrCdR5ddczmxgC0vAV%2B%2BMgc1XPocsImNqwj9sf4ZwxbrVR8f5M0DTCIQa8ddQaTikNEpdotU2vgAMuq7HkAu%2BWcwtZCo4tjy%2BcbjtTyTSEKg8uxbBBSU%2FguQXo467bE7ADLUSr37q%2FSDz8FRxjM0WUKuN1HK1n89qr%2FNVPh5xBG1t2h3UjmScQscb4Abzbf6A6o60DcqyvsRI984SiL0aUSTo9NnKO%2BYIWXPxnDPHJN9XsLEarDgNYb2A%3D%3D&poru=1fyQvpYGLPey6jEzfZHb6Mj3qxX5p4rwiS%2Ba5Yyk7R4%3D&_opnslfp=1&
208.91.196.145200 OK 195 B URL HTTP/1.1 ww1.overadmit.site/?fp=pqcvPP7XAfouZ61iINoQ2gIQlEC%2BHxrCdR5ddczmxgC0vAV%2B%2BMgc1XPocsImNqwj9sf4ZwxbrVR8f5M0DTCIQa8ddQaTikNEpdotU2vgAMuq7HkAu%2BWcwtZCo4tjy%2BcbjtTyTSEKg8uxbBBSU%2FguQXo467bE7ADLUSr37q%2FSDz8FRxjM0WUKuN1HK1n89qr%2FNVPh5xBG1t2h3UjmScQscb4Abzbf6A6o60DcqyvsRI984SiL0aUSTo9NnKO%2BYIWXPxnDPHJN9XsLEarDgNYb2A%3D%3D&poru=1fyQvpYGLPey6jEzfZHb6Mj3qxX5p4rwiS%2Ba5Yyk7R4%3D&_opnslfp=1&
IP 208.91.196.145:0
ASN #40034 CONFLUENCE-NETWORK-INC
File type HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f31fdb2c45af1b9ccb937f597203db22
99496c54ce7f283b6c0c50e1331cdbe3856e01fe
bbcfe2884044d776d5e6f337aea76d2fb5bf1f90049ae29622c02bb768b7d2ea
GET /?fp=pqcvPP7XAfouZ61iINoQ2gIQlEC%2BHxrCdR5ddczmxgC0vAV%2B%2BMgc1XPocsImNqwj9sf4ZwxbrVR8f5M0DTCIQa8ddQaTikNEpdotU2vgAMuq7HkAu%2BWcwtZCo4tjy%2BcbjtTyTSEKg8uxbBBSU%2FguQXo467bE7ADLUSr37q%2FSDz8FRxjM0WUKuN1HK1n89qr%2FNVPh5xBG1t2h3UjmScQscb4Abzbf6A6o60DcqyvsRI984SiL0aUSTo9NnKO%2BYIWXPxnDPHJN9XsLEarDgNYb2A%3D%3D&poru=1fyQvpYGLPey6jEzfZHb6Mj3qxX5p4rwiS%2Ba5Yyk7R4%3D&_opnslfp=1& HTTP/1.1
Host: ww1.overadmit.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.overadmit.site/
Connection: keep-alive
Cookie: isframesetenabled=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 00:53:02 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
Cteonnt-Length: 272
Keep-Alive: timeout=5, max=78
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
Cache-Control: private
Content-Encoding: gzip
Content-Length: 195
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5728
Expires: Tue, 07 Feb 2023 02:28:30 GMT
Date: Tue, 07 Feb 2023 00:53:02 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5728
Expires: Tue, 07 Feb 2023 02:28:30 GMT
Date: Tue, 07 Feb 2023 00:53:02 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5728
Expires: Tue, 07 Feb 2023 02:28:30 GMT
Date: Tue, 07 Feb 2023 00:53:02 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5728
Expires: Tue, 07 Feb 2023 02:28:30 GMT
Date: Tue, 07 Feb 2023 00:53:02 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5728
Expires: Tue, 07 Feb 2023 02:28:30 GMT
Date: Tue, 07 Feb 2023 00:53:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98179745-5078-472e-9610-33edd9a43956.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98179745-5078-472e-9610-33edd9a43956.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da137941b3b3ec5187780ff2bfaef328
29a8a1274d93a71bb356026b15b76ab48096163d
8260b49fa8fb9fb477072575eeb5fefd0b595b04db7840bca29d9f097f37ae9e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98179745-5078-472e-9610-33edd9a43956.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10188
x-amzn-requestid: e13ea99d-1fac-47c6-9e50-6ada36f9d25b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f5ZxwG_NoAMFzhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e0700b-61d7fbd866fef9920e5ae3d4;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 03:12:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GZIsSc_3eY9FIp3n4mRSQjiCbYp2c9xnARr20iceFrXh-Bj0OvcZXg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 03:53:15 GMT
etag: "29a8a1274d93a71bb356026b15b76ab48096163d"
content-type: image/jpeg
age: 75587
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cf292b03a5db7eb8e0660a518f41233c
8fa486cdecffff8a663da2df88227ee784c298a2
cfc5efb92068bdeeda5c95f9851213b14afa76776486d0493cf4c05b30453cf0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7926951f-dd16-4029-a877-933fa5d3c0f5.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5634
x-amzn-requestid: 632886dc-5740-40ae-b91f-f0bc1578ac2e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpdrbGvaoAMF_4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0fe2-4e20757b045beab314bdf92e;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xCFj9HPjTNZgRqRW4qwDUe2duq7q24zyMZSuIa6Nw7QjeouM11_ziw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 15:41:08 GMT
age: 33114
etag: "8fa486cdecffff8a663da2df88227ee784c298a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 003fc35e140a75a12b7795c3986426ec
da002b22e2a01f48a545b369d4403eabb17a10d5
bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13160
x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzVxSHh7IAMFjAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qwSN-ztVJgRfu3bFIjYaVYV8Cnx77j1ugkRjqhRtRXdPju7AhEMg-A==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 07:09:58 GMT
age: 63784
etag: "da002b22e2a01f48a545b369d4403eabb17a10d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a62e65-5d07-4259-aa47-d2491847eee9.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a62e65-5d07-4259-aa47-d2491847eee9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d29e7077f69b88a0108efeb7a2efe7e9
1958f83edeb8c6b68f17cead3fb5714f44e619eb
371f02a5b36ac3e52cc6c4e78f0980107a0f92105e79ee53278089ae5ff6de93
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a62e65-5d07-4259-aa47-d2491847eee9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10788
x-amzn-requestid: 8e1c8026-1eea-4eb0-810e-7ea43ed11f87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyymWEsSoAMFykg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ddcaf5-20fc23b535fa86f56a34fbae;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 03:03:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Nb86Kj6pqD3DFzCeTNtTGNXsNfHLvu4kgYq6qmhu2Ygya462lBl0lg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 05:11:31 GMT
age: 70891
etag: "1958f83edeb8c6b68f17cead3fb5714f44e619eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eedb4de12585c70ddb5b8f94fe6a59e2
83c9437e71a0a03b3e8ff652155a85eafa76cdda
d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ovhdLaEGaDSC8X0F9VamLw0KyBPWkxfYg5pssOT8NOZP4IBtNk6Gfw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:55:19 GMT
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
content-type: image/jpeg
age: 10663
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F121b1de4-8f9a-42ce-aca5-9ff190235e9e.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F121b1de4-8f9a-42ce-aca5-9ff190235e9e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 94a975a866d575be68f687fd81a36f5b
16f334adff0205badeb468d248f925504137782a
d550618f7c7e902ca0f4f57f8da3199b22063f242e0fa07f10fe6631b35e026b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F121b1de4-8f9a-42ce-aca5-9ff190235e9e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5584
x-amzn-requestid: 130aa2ee-b175-4658-9c82-8f49944207dd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpdejHeaIAMFYgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63da0f90-4f9c757a30af548878052b0d;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 07:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9URXL7tafn0kenWtzS1LRu2q0bgjM8ZC4NCS6L6MMPkvBqIHDOMugA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 22:15:10 GMT
age: 9472
etag: "16f334adff0205badeb468d248f925504137782a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2