urlquery - report: www.officeinsumos.com/adm/gJLqMEKAM8/?i=1

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
firefox.settings.services.mozilla.com (15)	867	2020-06-04 20:08:41 UTC	2022-09-25 11:34:24 UTC	143.204.55.115
firefox-settings-attachments.cdn.mozilla.net (1)	11509	2019-11-30 09:32:57 UTC	2022-09-25 08:26:40 UTC	143.204.55.36
r3.o.lencr.org (8)	344	2020-12-02 08:52:13 UTC	2022-09-25 05:02:41 UTC	23.36.77.32
content-signature-2.cdn.mozilla.net (2)	1152	2020-11-03 12:26:46 UTC	2022-09-25 05:42:52 UTC	34.160.144.191
firefox.settings.services.mozilla.com (15)	867	2020-06-04 20:08:41 UTC	2022-09-25 11:34:24 UTC	143.204.55.35
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2022-09-25 08:02:21 UTC	93.184.220.29
push.services.mozilla.com (1)	2140	2015-09-03 10:29:36 UTC	2022-09-25 05:07:25 UTC	35.161.231.36
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2022-09-25 04:26:31 UTC	34.120.237.76
detectportal.firefox.com (2)	1601	2017-01-30 00:03:31 UTC	2022-09-25 04:48:57 UTC	34.107.221.82
getpocket.cdn.mozilla.net (1)	1369	2017-08-31 07:41:15 UTC	2022-09-25 04:26:59 UTC	34.120.5.221
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-09-25 04:51:16 UTC	34.117.237.239
shavar.services.mozilla.com (1)	3602	2017-01-30 05:00:58 UTC	2022-09-25 05:03:37 UTC	52.11.213.12
www.officeinsumos.com (1)	0	2014-01-16 09:19:31 UTC	2022-09-25 02:14:02 UTC	200.58.117.184	Unknown ranking

Scan Date	Severity	Indicator	Comment
2022-09-25	2	www.officeinsumos.com/adm/gJLqMEKAM8/?i=1	Malware

Scan Date	Severity	Indicator	Comment
2022-09-25	2	officeinsumos.com	Sinkholed

Date	UQ / IDS / BL	URL	IP
2022-09-30 11:59:08 +0000	0 - 0 - 2	www.officeinsumos.com/adm/gJLqMEKAM8/?i=1	200.58.117.184
2022-09-29 21:01:42 +0000	0 - 0 - 4	www.officeinsumos.com/adm/gJLqMEKAM8/	200.58.117.184
2022-09-29 21:01:19 +0000	0 - 0 - 2	www.officeinsumos.com/adm/gJLqMEKAM8/?i=1	200.58.117.184
2022-09-29 05:46:01 +0000	0 - 0 - 4	www.officeinsumos.com/adm/gJLqMEKAM8/	200.58.117.184
2022-09-28 17:20:48 +0000	0 - 0 - 4	www.officeinsumos.com/adm/gJLqMEKAM8/	200.58.117.184

Date	UQ / IDS / BL	URL	IP
2023-01-28 05:58:01 +0000	0 - 2 - 2	www.cesasin.com.ar/administrator/viA95RR/	179.43.117.122
2023-01-28 04:11:58 +0000	0 - 0 - 2	cdaonline.com.ar/wp-admin/FILE/x7Z9wBk77Tt6v9/	66.97.37.52
2023-01-28 04:11:48 +0000	0 - 0 - 3	amarteargentina.com.ar/wp-admin/Document/1v1t (...)	66.97.40.114
2023-01-28 04:11:12 +0000	0 - 0 - 3	cdaonline.com.ar/wp-admin/sites/ci6p05ScnuoNq (...)	66.97.37.52
2023-01-28 04:10:58 +0000	0 - 2 - 3	amarteargentina.com.ar/wp-admin/GOAvrV/	66.97.40.114

Date	UQ / IDS / BL	URL	IP
2022-09-30 11:59:08 +0000	0 - 0 - 2	www.officeinsumos.com/adm/gJLqMEKAM8/?i=1	200.58.117.184
2022-09-29 21:01:42 +0000	0 - 0 - 4	www.officeinsumos.com/adm/gJLqMEKAM8/	200.58.117.184
2022-09-29 21:01:19 +0000	0 - 0 - 2	www.officeinsumos.com/adm/gJLqMEKAM8/?i=1	200.58.117.184
2022-09-29 05:46:01 +0000	0 - 0 - 4	www.officeinsumos.com/adm/gJLqMEKAM8/	200.58.117.184
2022-09-28 17:20:48 +0000	0 - 0 - 4	www.officeinsumos.com/adm/gJLqMEKAM8/	200.58.117.184

Date	UQ / IDS / BL	URL	IP
2023-01-28 06:24:28 +0000	0 - 2 - 3	helmprecision.com/Helm/main/css/k8Ui5h/	24.75.44.61
2023-01-28 06:05:05 +0000	0 - 3 - 2	95.214.24.244/1337/Rrobknnz-TORRENTOLD.exe	95.214.24.244
2023-01-28 06:01:04 +0000	0 - 5 - 1	www.hebgb.top/study/DetectionCurriculum.exe	121.42.78.86
2023-01-28 05:43:54 +0000	0 - 0 - 2	github.com/EvilHuntersProject/Launcher/raw/d2 (...)	140.82.121.3
2023-01-28 05:43:45 +0000	0 - 0 - 1	github.com/EvilHuntersProject/Launcher/raw/02 (...)	140.82.121.3

Request	Response
GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: detectportal.firefox.com/success.txt?ipv4 FQDN: detectportal.firefox.com IP: 34.107.221.82 HASH: 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5 34.107.221.82 HTTP/1.1 200 OK Content-Type: text/plain Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 24 Sep 2022 12:26:40 GMT Age: 85643 Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 --- Additional Info --- Magic: ASCII text Size: 8 Md5: ae780585f49b94ce1444eb7d28906123 Sha1: 7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86 Sha256: 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80" Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13093 Expires: Sun, 25 Sep 2022 15:52:17 GMT Date: Sun, 25 Sep 2022 12:14:04 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 09a973de929ab7452edc342c780d3668 Sha1: 3f14f6e0a36f76863c0aea6fb561c266404a7ea3 Sha256: e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 80a5368c14f9c89b7c247eef70d98cc7886d0c1e1607cb39e061121603467265 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "80A5368C14F9C89B7C247EEF70D98CC7886D0C1E1607CB39E061121603467265" Last-Modified: Sun, 25 Sep 2022 01:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11129 Expires: Sun, 25 Sep 2022 15:19:33 GMT Date: Sun, 25 Sep 2022 12:14:04 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 19c560e684aecef6975e0cc8dd3778c9 Sha1: 9a672a2ab8c4ba5eefa68ef5c4d331f423dda3bf Sha256: 80a5368c14f9c89b7c247eef70d98cc7886d0c1e1607cb39e061121603467265
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US&region=NO&count=30 HTTP/1.1 Host: getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: getpocket.cdn.mozilla.net/v3/firefox/global-recs?versio (...) FQDN: getpocket.cdn.mozilla.net IP: 34.120.5.221 HASH: 06fbf48397c37317fe3e0260c51fa55ed65f569681ab407c6b222b31ce61a196 34.120.5.221 HTTP/2 200 OK content-type: application/json server: nginx vary: Accept-Encoding content-location: global-recs.php tcn: choice x-frame-options: SAMEORIGIN status: 200 OK x-source: Pocket pragma: cache p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE" x-cache: Miss from cloudfront x-amz-cf-pop: SEA73-P2 x-amz-cf-id: 075czi1DQR-l8d2G11_nqyBrmUyv8JQ3lF1CZlJjGwjCXChsiSLDhQ== content-encoding: gzip via: 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google date: Sun, 25 Sep 2022 12:00:52 GMT content-length: 39735 age: 792 cache-control: s-maxage=900,public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (65536), with no line terminators Size: 39735 Md5: b8cb22c7868df71413240de1fb99e447 Sha1: d2354773a5f63ca5e261fb33108e8bc3448a7ff0 Sha256: 06fbf48397c37317fe3e0260c51fa55ed65f569681ab407c6b222b31ce61a196
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4721814da286852318f7ebf9857bd4bf01f0beea2c9eb7ddb9f290e3fa472232 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4721814DA286852318F7EBF9857BD4BF01F0BEEA2C9EB7DDB9F290E3FA472232" Last-Modified: Fri, 23 Sep 2022 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14125 Expires: Sun, 25 Sep 2022 16:09:29 GMT Date: Sun, 25 Sep 2022 12:14:04 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: b3e81b5bd7bd8e12288a8159e44ceb3f Sha1: 977945964ffcbf49ac78f840db9da822c50c82f0 Sha256: 4721814da286852318f7ebf9857bd4bf01f0beea2c9eb7ddb9f290e3fa472232
GET /chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: EXiMf+eE9KN1zn3nRRWB4sBsBPKHzwJ1MGXwRcdp7zhHZFFicTnGJppoVapvEnR7mYuqLx/wrG0= x-amz-request-id: DPZW4683S0V4DZGT content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sun, 25 Sep 2022 12:04:28 GMT age: 576 last-modified: Wed, 11 May 2022 19:51:39 GMT etag: "48ca0beea419a9039591cf1aee5179e0" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 48ca0beea419a9039591cf1aee5179e0 Sha1: 9e92629f505fcc07aab51221e8fe62197a23e307 Sha256: 630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.35 HASH: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551 143.204.55.35 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length Cache-Control: max-age=3600 Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Sun, 25 Sep 2022 11:14:56 GMT X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: hepKth6iYkcSlES-GUVWHl4abymrVKizRSUuZocnnFAaEgBqNCi2Gg== Age: 3548 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 2d12f67fe57a87e7366b662d153a5582 Sha1: d7b02d81cc74f24a251d9363e0f4b0a149264ec1 Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sun, 25 Sep 2022 12:14:04 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: b6b8df188bdb3b9dd0ed7a6a4b69e80c60aaff396965af52c9a250250711e26a 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5306 Cache-Control: max-age=108571 Date: Sun, 25 Sep 2022 12:14:04 GMT Etag: "632f366d-1d7" Expires: Mon, 26 Sep 2022 18:23:35 GMT Last-Modified: Sat, 24 Sep 2022 16:55:09 GMT Server: ECS (ska/F71C) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: ffa76de2f7f2ddf824d1da47835ebb36 Sha1: b7e94e539eb6bed2ef9036edffcf9691c6e75f6c Sha256: b6b8df188bdb3b9dd0ed7a6a4b69e80c60aaff396965af52c9a250250711e26a
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.35 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 143.204.55.35 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Date: Sun, 25 Sep 2022 12:04:17 GMT Cache-Control: max-age=3600, max-age=3600 Expires: Sun, 25 Sep 2022 12:14:05 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: KC8WMhNrUiDNIr7-2VgkNjHVEBVu2oIJgak8tuq2yMNqybvED5cWZw== Age: 588 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1 Host: shavar.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 773 Connection: close Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: none Pragma: no-cache Cache-Control: no-cache	URL: shavar.services.mozilla.com/downloads?client=Firefox&ap (...) FQDN: shavar.services.mozilla.com IP: 52.11.213.12 HASH: ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b 52.11.213.12 HTTP/1.1 200 OK Content-Type: application/octet-stream Date: Sun, 25 Sep 2022 12:14:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 8 Connection: Close --- Additional Info --- Magic: ASCII text Size: 8 Md5: 29fc57841962e407cb50c1be60284bf7 Sha1: ce968a77e2996da5eee8925182318f171ccdce47 Sha256: ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 28205ee62c77b1caad6cc24c1ce98ddb92d26f67d41270f7d5278208a907c62f 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5156 Cache-Control: 'max-age=158059' Date: Sun, 25 Sep 2022 12:14:05 GMT Last-Modified: Sun, 25 Sep 2022 10:48:09 GMT Server: ECS (ska/F71D) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: fd3b36dc2b620b48de491a8d9ba00fc0 Sha1: be67ba7db5215dcb7c9225876e35a5e0a5005c9e Sha256: 28205ee62c77b1caad6cc24c1ce98ddb92d26f67d41270f7d5278208a907c62f
GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: detectportal.firefox.com/success.txt?ipv4 FQDN: detectportal.firefox.com IP: 34.107.221.82 HASH: 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5 34.107.221.82 HTTP/1.1 200 OK Content-Type: text/plain Server: nginx Content-Length: 8 Via: 1.1 google Date: Sat, 24 Sep 2022 12:26:40 GMT Age: 85645 Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 --- Additional Info --- Magic: ASCII text Size: 8 Md5: ae780585f49b94ce1444eb7d28906123 Sha1: 7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86 Sha256: 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: fAFR1NUac/5z2QPE7dN/4w== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.161.231.36 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.161.231.36 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: v20y/ai9RLMcRpTJvmB+T801KdM= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221664089031514%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/monito (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: aa62117855ea62181cea34b84b5ce2feadebb794e3d400091dadac83be540b6b 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Sun, 25 Sep 2022 06:57:11 GMT X-Content-Type-Options: nosniff Content-Encoding: br Date: Sun, 25 Sep 2022 12:02:02 GMT Cache-Control: max-age=3600, max-age=3600 Expires: Sun, 25 Sep 2022 12:02:41 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: YHIxj6UK94GgwwR1VVBUxbCxJLkQwVQWO29Lu8kj7J7fWf_pPcwXJw== Age: 723 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (22383), with no line terminators Size: 4701 Md5: 6435c32a9b8bd09dc6e247b9b72024c8 Sha1: 207964034a813a52cbe6cba42364c2bab011f19d Sha256: aa62117855ea62181cea34b84b5ce2feadebb794e3d400091dadac83be540b6b
GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1663677442637&_since=%221653914271178%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/blockl (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: f3b123e7e04f170e177ce0d4008c0c643632313441764a5704427efa33953635 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Tue, 20 Sep 2022 12:37:22 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: br Date: Sun, 25 Sep 2022 12:10:49 GMT Cache-Control: max-age=3600 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: aWHUt1Hit13g3y3zT5ybGWZUXgiuf-FsbmUTS-afQdkEb5WtsuaPqg== Age: 716 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (65536), with no line terminators Size: 12468 Md5: 43d978185af22ca8100d76b682ef2b65 Sha1: 6fd02baac076542fffda0860c18256d9e3a68841 Sha256: f3b123e7e04f170e177ce0d4008c0c643632313441764a5704427efa33953635
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: scILGppplJ6mhGqwgUOAD6jr5BQg+fkmzKfP8YmhZy8fhWnvCWYEJ2XE7N1ehbyP2sSGmGZa6x0= x-amz-request-id: Y2BJYW2773RN8JER content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sun, 25 Sep 2022 11:48:06 GMT age: 1560 last-modified: Sat, 10 Sep 2022 18:47:45 GMT etag: "6113f8408c59aebe188d6af273b90743" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 6113f8408c59aebe188d6af273b90743 Sha1: 7398873bf00f99944eaa77ad3ebc0d43c23dba6b Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length Cache-Control: max-age=3600 Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Sun, 25 Sep 2022 11:14:56 GMT X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: IjJUDIPD9Py6dsqffraFlHBzo-tqPC1dePAMxrmL7gZ8dkNkm12Mlg== Age: 3550 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 2d12f67fe57a87e7366b662d153a5582 Sha1: d7b02d81cc74f24a251d9363e0f4b0a149264ec1 Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /staging/addons-bloomfilters/67600448-6fc2-4f40-bd4a-8687d731734f.bin HTTP/1.1 Host: firefox-settings-attachments.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox-settings-attachments.cdn.mozilla.net/staging/ad (...) FQDN: firefox-settings-attachments.cdn.mozilla.net IP: 143.204.55.36 HASH: 34f969c8e082310785ec4262e2d5b58c919d4de856ffc64b3467507f83ac9571 143.204.55.36 HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 795699 Connection: keep-alive Last-Modified: Mon, 27 Jun 2022 12:39:11 GMT x-amz-version-id: 9np1boOrxtHVWzMczpbX1a.N_ewQWHDF Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 25 Sep 2022 05:20:05 GMT ETag: "9b95765b0e26af76116a95a966d61354" X-Cache: Hit from cloudfront Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: kfsoI4CbW4CVzmJkKOBt4ViitaJJHnlOUjCpUucxEZb9JNyie3uW-g== Age: 28767 --- Additional Info --- Magic: data Size: 795699 Md5: 9b95765b0e26af76116a95a966d61354 Sha1: 3f7c1b40fc999b83f3696f455402e49ab484b027 Sha256: 34f969c8e082310785ec4262e2d5b58c919d4de856ffc64b3467507f83ac9571
GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1664064064261&_since=%221654732864402%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 577530a237711439c2a17d51e43dabcb81b1216a80eade3fd0fd8764d9855626 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Sun, 25 Sep 2022 00:01:04 GMT X-Content-Type-Options: nosniff Content-Encoding: br Cache-Control: max-age=3600 Date: Sun, 25 Sep 2022 11:25:04 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: P_4VMk041mCFeVRJ_ltK9jAjEtcOWm_D3H9xyuE7aUEIRowqnvKvkQ== Age: 2942 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (58918), with no line terminators Size: 12328 Md5: 8064c411919ef93177ab4d334c7ff85e Sha1: a75a4fe355064382a2feee4d4d6db95c3983e141 Sha256: 577530a237711439c2a17d51e43dabcb81b1216a80eade3fd0fd8764d9855626
GET /adm/gJLqMEKAM8/?i=1 HTTP/1.1 Host: www.officeinsumos.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: www.officeinsumos.com/adm/gJLqMEKAM8/?i=1 FQDN: www.officeinsumos.com IP: 200.58.117.184 HASH: e4736034d081504e48637a91ddea35765942257fbbe3db0b5c0bb46521a0f8ca 200.58.117.184 HTTP/1.1 200 OK Content-Type: application/vnd.ms-excel Cache-Control: no-cache, must-revalidate Pragma: no-cache Content-Length: 129536 Expires: Sun, 25 Sep 2022 12:14:05 GMT Last-Modified: Sun, 25 Sep 2022 12:14:05 GMT Server: Microsoft-IIS/7.5 Set-Cookie: 6330460d2a6f9=1664108045; expires=Sun, 25-Sep-2022 12:15:05 GMT; path=/ Content-Disposition: attachment; filename="07665581348573866.xls" Content-Transfer-Encoding: binary X-Powered-By: ASP.NET Date: Sun, 25 Sep 2022 12:14:04 GMT --- Additional Info --- Magic: Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Author: DSAfadr, Last Saved By: HRdtjnd, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 18:19:34 2015, Last Saved Time/Date: Tue Mar 29 08:12:02 2022, Security: 0\012- OLE 2 Compound Document, v3.62, SecID 0xfb, 2 FAT sectors, 0 Mini FAT sector : Microsoft Excel 97-2003 worksheet or template\012- data Size: 129536 Md5: c706ae2481559367d6a1565195c8699b Sha1: 27e409ad859f829c9739bbccaac8cf6dc59d872f Sha256: e4736034d081504e48637a91ddea35765942257fbbe3db0b5c0bb46521a0f8ca Alerts: Blocklists: - fortinet: Malware - quad9: Sinkholed File Analyzers: - virustotal: 37/58
GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1663968857141&_since=%221654636467710%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 82981fa695d4faf177fbe5953f0b3fd36af2011c327a9965212ac944341da0ca 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 23 Sep 2022 21:34:17 GMT X-Content-Type-Options: nosniff Content-Encoding: br Date: Sun, 25 Sep 2022 11:36:30 GMT Cache-Control: max-age=3600 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: tXD-aMqxC3wSFln_eux2bigMWpb7nQUEXe-T7346rf99bZUJIAtTZw== Age: 2298 --- Additional Info --- Magic: ASCII text, with very long lines (65536), with no line terminators Size: 5295 Md5: 757381e907135a887b2676d3e4ad7df2 Sha1: 2ee844d8d11014a6bbbabe64dcf7c27b6f82b52f Sha256: 82981fa695d4faf177fbe5953f0b3fd36af2011c327a9965212ac944341da0ca
GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1662044085942&_since=%221622732735407%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 21c252701f27eb5480fb536f519278dcde70168b69c9cb6e225a01116a171a87 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Thu, 01 Sep 2022 14:54:45 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Sun, 25 Sep 2022 12:01:00 GMT Cache-Control: max-age=3600 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: qbTLb3752Ozi_K5C2cXDyGVCoewkrxtEjyH1WfZwaQHxcmEoQTIPvA== Age: 800 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (20423), with no line terminators Size: 5855 Md5: 10baf28aac846a3698df02337eaf7cee Sha1: 6b67e052ee8a728c5481a6a6b54d6a0a4833638b Sha256: 21c252701f27eb5480fb536f519278dcde70168b69c9cb6e225a01116a171a87
GET /v1/buckets/main/collections/password-rules/changeset?_expected=1659924409785&_since=%221652712410939%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 08e9a89b6e7d1515b92b073c37ae0f41e50d4df90247356043d03d9dbef29324 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Mon, 08 Aug 2022 02:06:49 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: br Date: Sun, 25 Sep 2022 12:07:09 GMT Cache-Control: max-age=3600 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: fg2ExcjMGLKu8wgG6uUu0TLU28k1ny899s-yDit01rqV-7_smbN4aw== Age: 427 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (1393), with no line terminators Size: 780 Md5: 7cc9023d283eac5c86c23ef7d8d53612 Sha1: 18ebd937973c42f4252969afbacab560993826e7 Sha256: 08e9a89b6e7d1515b92b073c37ae0f41e50d4df90247356043d03d9dbef29324
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3" Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2221 Expires: Sun, 25 Sep 2022 12:51:07 GMT Date: Sun, 25 Sep 2022 12:14:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7038cca95198779d8bb479045eb56652 Sha1: e9dcf9451e849f4d55b0909b33a51bd0b1a35296 Sha256: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3" Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2221 Expires: Sun, 25 Sep 2022 12:51:07 GMT Date: Sun, 25 Sep 2022 12:14:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7038cca95198779d8bb479045eb56652 Sha1: e9dcf9451e849f4d55b0909b33a51bd0b1a35296 Sha256: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3" Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2221 Expires: Sun, 25 Sep 2022 12:51:07 GMT Date: Sun, 25 Sep 2022 12:14:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7038cca95198779d8bb479045eb56652 Sha1: e9dcf9451e849f4d55b0909b33a51bd0b1a35296 Sha256: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3" Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2221 Expires: Sun, 25 Sep 2022 12:51:07 GMT Date: Sun, 25 Sep 2022 12:14:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7038cca95198779d8bb479045eb56652 Sha1: e9dcf9451e849f4d55b0909b33a51bd0b1a35296 Sha256: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3" Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2221 Expires: Sun, 25 Sep 2022 12:51:07 GMT Date: Sun, 25 Sep 2022 12:14:06 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7038cca95198779d8bb479045eb56652 Sha1: e9dcf9451e849f4d55b0909b33a51bd0b1a35296 Sha256: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1730b63d-9494-4330-acb8-7cb387a0cf08.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 40e7a573f510ff29db04b3fbfacde2ad6ecd67b4c0be30034e057654c86408a4 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5305 x-amzn-requestid: df7ba218-d20c-4389-8895-affd870ad15f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Y5JqKGtHoAMFcJw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-632d230d-1854a5420f7091316aa4f211;Sampled=0 x-amzn-remapped-date: Fri, 23 Sep 2022 03:07:57 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: v37Rjs_OtmFd6UKau0Flv_J6GAWTe0UdA8hXaDmmn6SmLXQbEHeBVQ== via: 1.1 44cd593d82a2d200a94217033c614c6a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google date: Sun, 25 Sep 2022 03:45:44 GMT age: 30502 etag: "db601663fa6ee5564eddaf8d3d84c7b04bf3871c" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5305 Md5: 9773faaac4deac40b96cd0802e974f36 Sha1: db601663fa6ee5564eddaf8d3d84c7b04bf3871c Sha256: 40e7a573f510ff29db04b3fbfacde2ad6ecd67b4c0be30034e057654c86408a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0737a7ae-3ae7-4fe5-b739-e988b295c795.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 13b990c3c6a9bee6def25d007e14628c52e427b6f4c718895b1817d5e8e59760 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8715 x-amzn-requestid: d5e237f4-4c0e-4e3b-b3ae-ea1eb5b7cafc x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Y5JmTEAwIAMF_Mg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-632d22f4-48a975a866edc1755858600f;Sampled=0 x-amzn-remapped-date: Fri, 23 Sep 2022 03:07:33 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Sm6N8Un8XKHtGGZwxLd1aYygBns1l8siRvcc2w_9V2imJopvt8Ockw== via: 1.1 44cd593d82a2d200a94217033c614c6a.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google date: Sun, 25 Sep 2022 07:09:15 GMT age: 18291 etag: "79c83cc27996b2339bd63764dbb2ae9744db6d70" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8715 Md5: a89e7161745036637a66e8ab5b7efdf9 Sha1: 79c83cc27996b2339bd63764dbb2ae9744db6d70 Sha256: 13b990c3c6a9bee6def25d007e14628c52e427b6f4c718895b1817d5e8e59760
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0693f3eb-ed7b-4594-b2db-7432590f4d49.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 9f381d59d2e4b086d43d784d7660e27f6f7760dc2b4eb9beee4b6e94801cb6db 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4723 x-amzn-requestid: 4be5e73a-e648-40a4-8566-cb3417e5843b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Y-_EKHYcoAMFgMw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-632f7880-4682134275162910149d09ec;Sampled=0 x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:04 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: 67JgCuzx90IROr0JQJq0jbsntmkbD0dReobbS4G1V6pPD22qOosLrg== via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google date: Sat, 24 Sep 2022 22:15:14 GMT age: 50332 etag: "8324b383c89771a2b1155ec6d069bf5a47338acd" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4723 Md5: 3d35df1f57d0736995615b0d8f50b8a3 Sha1: 8324b383c89771a2b1155ec6d069bf5a47338acd Sha256: 9f381d59d2e4b086d43d784d7660e27f6f7760dc2b4eb9beee4b6e94801cb6db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F254286e1-1c63-4609-9dfb-0eb4b9096238.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 1d2035cfcd283560ebe8494f9438e52f8d96cd092dd41cb0eb899a3f905c1e05 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6199 x-amzn-requestid: d26f22d9-4e9b-4764-8c96-2e1c7ce36340 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Y--OKHowoAMFbQA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-632f7727-7adb7c4925e6e50e13889544;Sampled=0 x-amzn-remapped-date: Sat, 24 Sep 2022 21:31:19 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: LryqVGSkKbiNOwcqXMULY9FXbOuZBBenjgGPDME3NZLZOdp5divXmw== via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google date: Sat, 24 Sep 2022 22:02:29 GMT age: 51097 etag: "358e74de395352a9529ff1c17856daf8900888c5" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6199 Md5: 714af732a9aa1db2b13ffb62810fd532 Sha1: 358e74de395352a9529ff1c17856daf8900888c5 Sha256: 1d2035cfcd283560ebe8494f9438e52f8d96cd092dd41cb0eb899a3f905c1e05
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 12826 x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YfVRNFP-oAMFgrA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0 x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: rN_8rm10Pxb0AUKW6ECfNulcYxBaS7FgGD15gT14dX-FlsGJfqahxA== via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google date: Sat, 24 Sep 2022 21:37:19 GMT age: 52607 etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data Size: 12826 Md5: b3a72e81317074689a71dac7059e4b6a Sha1: b6d56333d7f1ea7ddc8838d84de498ff913c5464 Sha256: e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 338a44f3bcc01bdd197f037dd8f8bf58a18dea00127465488efe76fb72a6fdff 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8914 x-amzn-requestid: 8cfdc32e-f04a-4fd6-a1f1-632934a682fd x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Y-_EUHqJoAMF7MQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-632f7881-14a6d8ef126409964607e0aa;Sampled=0 x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:05 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: kdF6En2vbJhRH1bkYMOuNm5XOIsT1qs3FE281N1SKn1FbyW-oNZsEw== via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google date: Sat, 24 Sep 2022 21:37:06 GMT etag: "2b6e37596e88b62f288dc8e8c937fd904fae28d5" age: 52620 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8914 Md5: dfdacc8edea3c24dad020d7e9c11b3f4 Sha1: 2b6e37596e88b62f288dc8e8c937fd904fae28d5 Sha256: 338a44f3bcc01bdd197f037dd8f8bf58a18dea00127465488efe76fb72a6fdff
GET /v1/buckets/main/collections/websites-with-shared-credential-backends/changeset?_expected=1659924446436&_since=%221650898092205%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 59b59d797d2b6580ed36f31f80ba7b50eb03fa834292ebcadb8741a81736a492 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Mon, 08 Aug 2022 02:07:26 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: br Date: Sat, 24 Sep 2022 14:56:10 GMT Cache-Control: max-age=259200 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: 4u7C8Th-WmHSK9ifO_e5irXjtq3gKs0exikaqpSghpgKGpfJwR2tnw== Age: 76740 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (8682), with no line terminators Size: 3117 Md5: 52f6f721fb70a74dc06d931f029cd069 Sha1: f712d9045fc896376cc5196bfa261afd9953d709 Sha256: 59b59d797d2b6580ed36f31f80ba7b50eb03fa834292ebcadb8741a81736a492
GET /v1/buckets/main/collections/search-config/changeset?_expected=1661199949574&_since=%221648132005528%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 3d9c1eac8a6567be6c86a852c60704f8387d24603ea87b2b61d9d3bc6e33be0a 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Mon, 22 Aug 2022 20:25:49 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: gzip Date: Sun, 25 Sep 2022 11:41:06 GMT Cache-Control: max-age=3600 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: j9Kdd8AyFlxVyTWJqhkBj546357wI8ACUroRig4X2nSrFdgz0xIvXQ== Age: 2010 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (14029), with no line terminators Size: 3393 Md5: 28bf4850d0381c6e4a223d862f122b2d Sha1: aaaf470779861678a2cd105303b37cdefc93302f Sha256: 3d9c1eac8a6567be6c86a852c60704f8387d24603ea87b2b61d9d3bc6e33be0a
GET /v1/buckets/main/collections/cfr/changeset?_expected=1659547595259&_since=%221653578606314%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: f2c47a9dcbd62f7cbe7fe61e0cd858a0da4bd43403124bb83f17f1ee07195df4 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Wed, 03 Aug 2022 17:26:35 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: br Date: Sun, 25 Sep 2022 11:41:12 GMT Cache-Control: max-age=3600 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: OTGtiDwoMhUFt696WzuvxLYL_up9BDADQlfbqDqLMIIZTolqj-tB8w== Age: 2125 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (3678), with no line terminators Size: 1405 Md5: b84fec2fd6522e4f336f46256fd6ab97 Sha1: a2a6234f0ef29d1c95608a1e96f2bd785661d12f Sha256: f2c47a9dcbd62f7cbe7fe61e0cd858a0da4bd43403124bb83f17f1ee07195df4
GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: ebedcd998069a878adc55ab9b57f75b224a6b4de8a818f7aef4f4004dbb7eddd 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 681 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: ETag, Cache-Control, Content-Length, Backoff, Retry-After, Content-Type, Last-Modified, Expires, Pragma, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Sun, 18 Sep 2022 16:36:56 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Date: Sun, 25 Sep 2022 12:12:33 GMT Cache-Control: no-cache, no-store, max-age=3600 ETag: "1663519016423" X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: Tx_xtbgmDxefecUSq26C7ILc6SsvO__q-BitGCPHGbbgFNybNzG6wQ== Age: 96 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (681), with no line terminators Size: 681 Md5: 50110165f91d3ccb5e8d1c8b7d282073 Sha1: 579e310d4a1b41d42b767138b044f03e60c18a2e Sha256: ebedcd998069a878adc55ab9b57f75b224a6b4de8a818f7aef4f4004dbb7eddd
GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1656585893704&_since=%221649762862679%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 7c9d70c6fbae326155f72c8d40252871c3067597192f4d604cc2b46dfd4b2527 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Content-Length, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Thu, 30 Jun 2022 10:44:53 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: br Date: Sun, 25 Sep 2022 11:15:42 GMT Cache-Control: max-age=3600 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: G7T1aAwh24U8W7041b3rUqnLg5wk8ZuwIbKjCHEeZyO1jUCpITQ4mg== Age: 3513 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (1710), with no line terminators Size: 900 Md5: 7b0f15820fbc79772d69b103cb111800 Sha1: 92ccda464b19ef35736c03edd82b578661361212 Sha256: 7c9d70c6fbae326155f72c8d40252871c3067597192f4d604cc2b46dfd4b2527
GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1657747510534&_since=%221654266643527%22 HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.115 HASH: 2dad5bc461560cf94f5ae7656c412affe3d9e55b33f3293e489ec61c958b412a 143.204.55.115 HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Wed, 13 Jul 2022 21:25:10 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Content-Encoding: br Date: Sun, 25 Sep 2022 11:49:14 GMT Cache-Control: max-age=3600 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: Fmq5WKUc0YSRqpg97nATixjc519M0tRv8E_9uS1y-DwOpaxPYRqQYw== Age: 1942 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (2195), with no line terminators Size: 1011 Md5: 9477019475bd75eab32f2b01f4ef0609 Sha1: fc65eb8024a31950975d0fd2837ff3f6c1f859bc Sha256: 2dad5bc461560cf94f5ae7656c412affe3d9e55b33f3293e489ec61c958b412a

                                        
                                            GET /success.txt?ipv4 HTTP/1.1 

                                        
                                            
Host: detectportal.firefox.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         34.107.221.82

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/plain

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 8 

                                        
                                            
Via: 1.1 google 

                                        
                                            
Date: Sat, 24 Sep 2022 12:26:40 GMT 

                                        
                                            
Age: 85643 

                                        
                                            
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   8

                                                Md5:    ae780585f49b94ce1444eb7d28906123

                                                Sha1:   7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86

                                                Sha256: 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "80A5368C14F9C89B7C247EEF70D98CC7886D0C1E1607CB39E061121603467265" 

                                        
                                            
Last-Modified: Sun, 25 Sep 2022 01:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=11129 

                                        
                                            
Expires: Sun, 25 Sep 2022 15:19:33 GMT 

                                        
                                            
Date: Sun, 25 Sep 2022 12:14:04 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    19c560e684aecef6975e0cc8dd3778c9

                                                Sha1:   9a672a2ab8c4ba5eefa68ef5c4d331f423dda3bf

                                                Sha256: 80a5368c14f9c89b7c247eef70d98cc7886d0c1e1607cb39e061121603467265

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4721814DA286852318F7EBF9857BD4BF01F0BEEA2C9EB7DDB9F290E3FA472232" 

                                        
                                            
Last-Modified: Fri, 23 Sep 2022 18:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=14125 

                                        
                                            
Expires: Sun, 25 Sep 2022 16:09:29 GMT 

                                        
                                            
Date: Sun, 25 Sep 2022 12:14:04 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    b3e81b5bd7bd8e12288a8159e44ceb3f

                                                Sha1:   977945964ffcbf49ac78f840db9da822c50c82f0

                                                Sha256: 4721814da286852318f7ebf9857bd4bf01f0beea2c9eb7ddb9f290e3fa472232

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.35

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 939 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Date: Sun, 25 Sep 2022 11:14:56 GMT 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: hepKth6iYkcSlES-GUVWHl4abymrVKizRSUuZocnnFAaEgBqNCi2Gg== 

                                        
                                            
Age: 3548 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    2d12f67fe57a87e7366b662d153a5582

                                                Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1

                                                Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 5306 

                                        
                                            
Cache-Control: max-age=108571 

                                        
                                            
Date: Sun, 25 Sep 2022 12:14:04 GMT 

                                        
                                            
Etag: "632f366d-1d7" 

                                        
                                            
Expires: Mon, 26 Sep 2022 18:23:35 GMT 

                                        
                                            
Last-Modified: Sat, 24 Sep 2022 16:55:09 GMT 

                                        
                                            
Server: ECS (ska/F71C) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    ffa76de2f7f2ddf824d1da47835ebb36

                                                Sha1:   b7e94e539eb6bed2ef9036edffcf9691c6e75f6c

                                                Sha256: b6b8df188bdb3b9dd0ed7a6a4b69e80c60aaff396965af52c9a250250711e26a

                                        
                                            POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1 

                                        
                                            
Host: shavar.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: text/plain 

                                        
                                            
Content-Length: 773 

                                        
                                            
Connection: close 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         52.11.213.12

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/octet-stream

                                        

                                        
                                            
Date: Sun, 25 Sep 2022 12:14:05 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000; includeSubDomains 

                                        
                                            
Content-Length: 8 

                                        
                                            
Connection: Close 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   8

                                                Md5:    29fc57841962e407cb50c1be60284bf7

                                                Sha1:   ce968a77e2996da5eee8925182318f171ccdce47

                                                Sha256: ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b

                                        
                                            GET /success.txt?ipv4 HTTP/1.1 

                                        
                                            
Host: detectportal.firefox.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         34.107.221.82

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/plain

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 8 

                                        
                                            
Via: 1.1 google 

                                        
                                            
Date: Sat, 24 Sep 2022 12:26:40 GMT 

                                        
                                            
Age: 85645 

                                        
                                            
Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   8

                                                Md5:    ae780585f49b94ce1444eb7d28906123

                                                Sha1:   7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86

                                                Sha256: 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5

                                        
                                            GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221664089031514%22 HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Sun, 25 Sep 2022 06:57:11 GMT 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Content-Encoding: br 

                                        
                                            
Date: Sun, 25 Sep 2022 12:02:02 GMT 

                                        
                                            
Cache-Control: max-age=3600, max-age=3600 

                                        
                                            
Expires: Sun, 25 Sep 2022 12:02:41 GMT 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: YHIxj6UK94GgwwR1VVBUxbCxJLkQwVQWO29Lu8kj7J7fWf_pPcwXJw== 

                                        
                                            
Age: 723 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (22383), with no line terminators

                                                Size:   4701

                                                Md5:    6435c32a9b8bd09dc6e247b9b72024c8

                                                Sha1:   207964034a813a52cbe6cba42364c2bab011f19d

                                                Sha256: aa62117855ea62181cea34b84b5ce2feadebb794e3d400091dadac83be540b6b

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: scILGppplJ6mhGqwgUOAD6jr5BQg+fkmzKfP8YmhZy8fhWnvCWYEJ2XE7N1ehbyP2sSGmGZa6x0= 

                                        
                                            
x-amz-request-id: Y2BJYW2773RN8JER 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sun, 25 Sep 2022 11:48:06 GMT 

                                        
                                            
age: 1560 

                                        
                                            
last-modified: Sat, 10 Sep 2022 18:47:45 GMT 

                                        
                                            
etag: "6113f8408c59aebe188d6af273b90743" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    6113f8408c59aebe188d6af273b90743

                                                Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b

                                                Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

                                        
                                            GET /staging/addons-bloomfilters/67600448-6fc2-4f40-bd4a-8687d731734f.bin HTTP/1.1 

                                        
                                            
Host: firefox-settings-attachments.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.36

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/octet-stream

                                        

                                        
                                            
Content-Length: 795699 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Mon, 27 Jun 2022 12:39:11 GMT 

                                        
                                            
x-amz-version-id: 9np1boOrxtHVWzMczpbX1a.N_ewQWHDF 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Sun, 25 Sep 2022 05:20:05 GMT 

                                        
                                            
ETag: "9b95765b0e26af76116a95a966d61354" 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: kfsoI4CbW4CVzmJkKOBt4ViitaJJHnlOUjCpUucxEZb9JNyie3uW-g== 

                                        
                                            
Age: 28767 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   795699

                                                Md5:    9b95765b0e26af76116a95a966d61354

                                                Sha1:   3f7c1b40fc999b83f3696f455402e49ab484b027

                                                Sha256: 34f969c8e082310785ec4262e2d5b58c919d4de856ffc64b3467507f83ac9571

                                        
                                            GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1662044085942&_since=%221622732735407%22 HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Thu, 01 Sep 2022 14:54:45 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Date: Sun, 25 Sep 2022 12:01:00 GMT 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: qbTLb3752Ozi_K5C2cXDyGVCoewkrxtEjyH1WfZwaQHxcmEoQTIPvA== 

                                        
                                            
Age: 800 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (20423), with no line terminators

                                                Size:   5855

                                                Md5:    10baf28aac846a3698df02337eaf7cee

                                                Sha1:   6b67e052ee8a728c5481a6a6b54d6a0a4833638b

                                                Sha256: 21c252701f27eb5480fb536f519278dcde70168b69c9cb6e225a01116a171a87

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3" 

                                        
                                            
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2221 

                                        
                                            
Expires: Sun, 25 Sep 2022 12:51:07 GMT 

                                        
                                            
Date: Sun, 25 Sep 2022 12:14:06 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    7038cca95198779d8bb479045eb56652

                                                Sha1:   e9dcf9451e849f4d55b0909b33a51bd0b1a35296

                                                Sha256: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3" 

                                        
                                            
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2221 

                                        
                                            
Expires: Sun, 25 Sep 2022 12:51:07 GMT 

                                        
                                            
Date: Sun, 25 Sep 2022 12:14:06 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    7038cca95198779d8bb479045eb56652

                                                Sha1:   e9dcf9451e849f4d55b0909b33a51bd0b1a35296

                                                Sha256: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3" 

                                        
                                            
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2221 

                                        
                                            
Expires: Sun, 25 Sep 2022 12:51:07 GMT 

                                        
                                            
Date: Sun, 25 Sep 2022 12:14:06 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    7038cca95198779d8bb479045eb56652

                                                Sha1:   e9dcf9451e849f4d55b0909b33a51bd0b1a35296

                                                Sha256: 0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0737a7ae-3ae7-4fe5-b739-e988b295c795.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8715 

                                        
                                            
x-amzn-requestid: d5e237f4-4c0e-4e3b-b3ae-ea1eb5b7cafc 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Y5JmTEAwIAMF_Mg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-632d22f4-48a975a866edc1755858600f;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 23 Sep 2022 03:07:33 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: Sm6N8Un8XKHtGGZwxLd1aYygBns1l8siRvcc2w_9V2imJopvt8Ockw== 

                                        
                                            
via: 1.1 44cd593d82a2d200a94217033c614c6a.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 25 Sep 2022 07:09:15 GMT 

                                        
                                            
age: 18291 

                                        
                                            
etag: "79c83cc27996b2339bd63764dbb2ae9744db6d70" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8715

                                                Md5:    a89e7161745036637a66e8ab5b7efdf9

                                                Sha1:   79c83cc27996b2339bd63764dbb2ae9744db6d70

                                                Sha256: 13b990c3c6a9bee6def25d007e14628c52e427b6f4c718895b1817d5e8e59760

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F254286e1-1c63-4609-9dfb-0eb4b9096238.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6199 

                                        
                                            
x-amzn-requestid: d26f22d9-4e9b-4764-8c96-2e1c7ce36340 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Y--OKHowoAMFbQA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-632f7727-7adb7c4925e6e50e13889544;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 24 Sep 2022 21:31:19 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: LryqVGSkKbiNOwcqXMULY9FXbOuZBBenjgGPDME3NZLZOdp5divXmw== 

                                        
                                            
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 24 Sep 2022 22:02:29 GMT 

                                        
                                            
age: 51097 

                                        
                                            
etag: "358e74de395352a9529ff1c17856daf8900888c5" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6199

                                                Md5:    714af732a9aa1db2b13ffb62810fd532

                                                Sha1:   358e74de395352a9529ff1c17856daf8900888c5

                                                Sha256: 1d2035cfcd283560ebe8494f9438e52f8d96cd092dd41cb0eb899a3f905c1e05

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8914 

                                        
                                            
x-amzn-requestid: 8cfdc32e-f04a-4fd6-a1f1-632934a682fd 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Y-_EUHqJoAMF7MQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-632f7881-14a6d8ef126409964607e0aa;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:05 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: kdF6En2vbJhRH1bkYMOuNm5XOIsT1qs3FE281N1SKn1FbyW-oNZsEw== 

                                        
                                            
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 24 Sep 2022 21:37:06 GMT 

                                        
                                            
etag: "2b6e37596e88b62f288dc8e8c937fd904fae28d5" 

                                        
                                            
age: 52620 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8914

                                                Md5:    dfdacc8edea3c24dad020d7e9c11b3f4

                                                Sha1:   2b6e37596e88b62f288dc8e8c937fd904fae28d5

                                                Sha256: 338a44f3bcc01bdd197f037dd8f8bf58a18dea00127465488efe76fb72a6fdff

                                        
                                            GET /v1/buckets/main/collections/search-config/changeset?_expected=1661199949574&_since=%221648132005528%22 HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Mon, 22 Aug 2022 20:25:49 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Date: Sun, 25 Sep 2022 11:41:06 GMT 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: j9Kdd8AyFlxVyTWJqhkBj546357wI8ACUroRig4X2nSrFdgz0xIvXQ== 

                                        
                                            
Age: 2010 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (14029), with no line terminators

                                                Size:   3393

                                                Md5:    28bf4850d0381c6e4a223d862f122b2d

                                                Sha1:   aaaf470779861678a2cd105303b37cdefc93302f

                                                Sha256: 3d9c1eac8a6567be6c86a852c60704f8387d24603ea87b2b61d9d3bc6e33be0a

                                        
                                            GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 681 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: ETag, Cache-Control, Content-Length, Backoff, Retry-After, Content-Type, Last-Modified, Expires, Pragma, Alert 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Sun, 18 Sep 2022 16:36:56 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Date: Sun, 25 Sep 2022 12:12:33 GMT 

                                        
                                            
Cache-Control: no-cache, no-store, max-age=3600 

                                        
                                            
ETag: "1663519016423" 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: Tx_xtbgmDxefecUSq26C7ILc6SsvO__q-BitGCPHGbbgFNybNzG6wQ== 

                                        
                                            
Age: 96 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (681), with no line terminators

                                                Size:   681

                                                Md5:    50110165f91d3ccb5e8d1c8b7d282073

                                                Sha1:   579e310d4a1b41d42b767138b044f03e60c18a2e

                                                Sha256: ebedcd998069a878adc55ab9b57f75b224a6b4de8a818f7aef4f4004dbb7eddd

                                        
                                            GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1657747510534&_since=%221654266643527%22 HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.115

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Wed, 13 Jul 2022 21:25:10 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Content-Encoding: br 

                                        
                                            
Date: Sun, 25 Sep 2022 11:49:14 GMT 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: Fmq5WKUc0YSRqpg97nATixjc519M0tRv8E_9uS1y-DwOpaxPYRqQYw== 

                                        
                                            
Age: 1942 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (2195), with no line terminators

                                                Size:   1011

                                                Md5:    9477019475bd75eab32f2b01f4ef0609

                                                Sha1:   fc65eb8024a31950975d0fd2837ff3f6c1f859bc

                                                Sha256: 2dad5bc461560cf94f5ae7656c412affe3d9e55b33f3293e489ec61c958b412a

URL	www.officeinsumos.com/adm/gJLqMEKAM8/?i=1
IP	200.58.117.184 (Argentina)
ASN	#27823 Dattatec.com
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-09-25 12:14:19 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	2
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (13)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 200.58.117.184

Last 5 reports on ASN: Dattatec.com

Last 5 reports on domain: officeinsumos.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (41)

Overview

Domain Summary (13)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 200.58.117.184

Last 5 reports on ASN: Dattatec.com

Last 5 reports on domain: officeinsumos.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (41)

Network Intrusion Detection Systems