firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 29 Sep 2022 22:16:01 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2BEf1wCtpiwtlVsePcFvr35OoiJ-ubJFNdICZRbv9W6ZonYAJ2qStg==
Age: 721
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6dd4587c98aef98ad0939030a6976a7f
92dc5966ac2deb0c3ac7fdd02bf8d28f9239801e
a382476d14b6ae14003333e7acdfbbd9ae8775d4c1a7d5c31116f33987043cff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A382476D14B6AE14003333E7ACDFBBD9AE8775D4C1A7D5C31116F33987043CFF"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3170
Expires: Thu, 29 Sep 2022 23:20:52 GMT
Date: Thu, 29 Sep 2022 22:28:02 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.49200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.49:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 29 Sep 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OJCi8YHFUumbuvxw4PxIarb2LUqxeny7m2ghLEiPey6IQNCweeev9A==
age: 61175
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Sep 2022 22:28:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 29 Sep 2022 21:29:33 GMT
Expires: Thu, 29 Sep 2022 21:32:08 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zKCwessvy7co5ADho2a9lDWgJY5EM0grCidb2-DDhPUzV6nFI37vyA==
Age: 3509
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f09cb223e3dc028c58cf32c2274c3766
ca7f1663a1200941986e786353ed2f3ff50bd0b2
9b89a5534b1a84f0a86f150dc7f1f699bb972f7b8e151b29c02454dd939066ca
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4744
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 22:28:02 GMT
Last-Modified: Thu, 29 Sep 2022 21:08:58 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
44.237.239.70101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.237.239.70:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Fe6a5X3BGWSxcZa6L//sKA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KpAXd8UTS1pus7rIVWVH0szGwWg=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4694
Expires: Thu, 29 Sep 2022 23:46:18 GMT
Date: Thu, 29 Sep 2022 22:28:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4694
Expires: Thu, 29 Sep 2022 23:46:18 GMT
Date: Thu, 29 Sep 2022 22:28:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4694
Expires: Thu, 29 Sep 2022 23:46:18 GMT
Date: Thu, 29 Sep 2022 22:28:04 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 11594ce7500d8776bfd5162b17f87d72
72603efba82d649ce5a7a0ca45dc830c0d9ef012
511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14073
x-amzn-requestid: 4ff72590-e28d-4d4b-af1a-4d62e75e3d66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKnpEsJoAMFlBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be30-38b014a25551aa0a2ab04ccf;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dyDhatfeYzzSQpRY7JpOIu3VhjlI8IOWcKCLCBWYaxJ1CYgCxqdQjA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:49:47 GMT
age: 2297
etag: "72603efba82d649ce5a7a0ca45dc830c0d9ef012"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff846d550-1085-41f0-ab5c-5cbdba5d3a00.jpeg
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff846d550-1085-41f0-ab5c-5cbdba5d3a00.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39d9370f63a9d19ea9c05fa1926ce1d0
f15bb6564adddb9a3bb9949321482e65714c047a
cf9353ff328f1afced61c19b48b2add29f4a212bd97cb4d874d5e7747850b3e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff846d550-1085-41f0-ab5c-5cbdba5d3a00.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5094
x-amzn-requestid: 49ace90a-85a0-45ea-8c0d-6a498fb89042
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPd60Eo9oAMFtkw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63361045-6b8a1c42300d4d6024186bfd;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:38:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fRMe9SPES3XBGB1yaL1KTmUcFsJb25xNyevvI8oggA5n5AvM0rN_Jg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:45:26 GMT
age: 2558
etag: "f15bb6564adddb9a3bb9949321482e65714c047a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b307b2d-4d65-4a44-bdc9-02e2eb3040fe.webp
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b307b2d-4d65-4a44-bdc9-02e2eb3040fe.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a7660f52ff0ccc2805e4186bfaeb86f3
64012d0a87c77d8409fa1be7d8d29124a81e3206
c4c2c65c2f830c5820dd019ada07607e31d338b824e2d66f7b4449c1026e123b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b307b2d-4d65-4a44-bdc9-02e2eb3040fe.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6058
x-amzn-requestid: 5895a9dc-4ec5-41cb-b0fa-b3f47677affe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPda6H8toAMFz7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f78-0941b5457484dc0c534333e2;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1Raa8DphZfTmcxIv1z70MMHpeboGmlsoY7k24hpc4GvYqAv4x2NGZQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:45:25 GMT
age: 2559
etag: "64012d0a87c77d8409fa1be7d8d29124a81e3206"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed1b116a-12f1-445b-8a5f-9353e3780e4f.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed1b116a-12f1-445b-8a5f-9353e3780e4f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b5c947ae0b46d0d8891da8b91b299d6
6edbfb2ea042482253f7d3d75cb1bd0b6c6a5f1f
ec7f8e44224ac291a1d66d8d99dfb44122bc85762fb9351738ce6d1c6ab72d47
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed1b116a-12f1-445b-8a5f-9353e3780e4f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6596
x-amzn-requestid: 0e130e37-9710-4fe9-a406-a26f4ed8650c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZASNPHSYIAMF0tA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ffd87-39a73c5476ddd0b2112f5f07;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 07:04:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: jhL_FzO_MIL5trbUJzod1scymtl7JZSRvwSW4RMD7l__4x4rejeIzg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 13:09:45 GMT
age: 33499
etag: "6edbfb2ea042482253f7d3d75cb1bd0b6c6a5f1f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3a61a47-b3b8-4176-b9f5-9676cd6af7fc.jpeg
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3a61a47-b3b8-4176-b9f5-9676cd6af7fc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92d42f7488d5bd64d79aff0b2161f5f5
59415987df0aeac28afe4f30f7a209e28c97cdbb
7e10344f60e9db2552d54e0cddc9807025681f9f8127b7861ad03fd1736dea5b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3a61a47-b3b8-4176-b9f5-9676cd6af7fc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9364
x-amzn-requestid: c9abd230-42f8-425c-8684-7b0b7abebc57
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPd5REysIAMFbig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6336103b-7b1d7d022cc6e02c55dcf47f;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:38:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: LgQJOkQAh49Ci3RJczlVtoURAumgrN21BxIvlWEa3BAs9AI_xEz4Ow==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:38:03 GMT
age: 3001
etag: "59415987df0aeac28afe4f30f7a209e28c97cdbb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac0adb1a-3390-4c2f-8884-055b217a0c2c.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac0adb1a-3390-4c2f-8884-055b217a0c2c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8337b3316a9c7ee94fea710d83ab5b70
632f621fe04de121001fb4d3b51fa8e318376bb2
070deb0d8955fabda308ae55d6ed0ebead9a5ea310b913e6ef762eb16b63c100
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac0adb1a-3390-4c2f-8884-055b217a0c2c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9685
x-amzn-requestid: a7a4df5a-3456-4658-aba9-abec376d79af
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPdZaHHJIAMFdhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f6f-28aecee27887f6516d2df6c9;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:39 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wzCOPcEwFdINaJFDS3hgms9bG2-nL2YsQJ9tNmWq7xd7S05irtgpbQ==
via: 1.1 94be61e339880d0097634de6934f7710.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:45:15 GMT
age: 2569
etag: "632f621fe04de121001fb4d3b51fa8e318376bb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
delivery.attempt.failure.feedmybot.net/public/795lQiVBX2EubLp8U2IJ9GnjbFFdwWGo
193.34.145.202302 Found 454 B URL HTTP/1.1 delivery.attempt.failure.feedmybot.net/public/795lQiVBX2EubLp8U2IJ9GnjbFFdwWGo
IP 193.34.145.202:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 264148e72b25b42268828a0ead1694d4
089b04a8ac67b659de53a27bfd14ae415168328d
31bdcafac0809072039e6b80e67c6d0c8ec3b6501450e92b6a7cc28af9996332
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /public/795lQiVBX2EubLp8U2IJ9GnjbFFdwWGo HTTP/1.1
Host: delivery.attempt.failure.feedmybot.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InpiSjFzRVpod0FNUkc4Zm9xZ2kxQXc9PSIsInZhbHVlIjoiOXBtWjlaSDR1U0JYUm1UWWY4T1ZCc1gveHdvS2Q4NEVPaUhlMEF0b3hDenBONEZvNG1pcjcvajhVV3ZiRmtRWnNLMEh0YUR0dElDZ0dsQ0ltejZ0a1pDS3ZWaXlsKzlhdTJiQ0QzRWh0bmRzblZYZzYzQkdkY29Bcm8wS1M2djciLCJtYWMiOiJmNDFiYTU4MGRjYWU3YmZjNzNmMGU4OGExMGViNmRiMzZkOTY1NTM0NGNlYjVlNDU1ODY1N2JmNDRkZGJkMTMxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InlQNEs0cFV4QzB2dDdGc05seHRyMEE9PSIsInZhbHVlIjoicjZSSko2NXZyUTZHK2lTb2FzcTNRelVScXUyWGJudWMzR2o2SjJ4azVrUHRYS2hPUG9KSTMweDhwYnhUK1hzTTRiazVKN1VHTXNjb0cxNVByU3VtQ09TUE4rRmRZbVFOZFN2a3A0b05ZQUo1VUdnRkJJUEVSZTFqdFdXNU0vZzEiLCJtYWMiOiIzYjhhMWRhZWMzM2IyMDc0NGMyOTVjNzFmZjgxNDg1Y2E4YmM2ZWY4NWMwZmIxNjRhYzI4NDVkMDgzZjI1M2RhIiwidGFnIjoiIn0%3D; _lr_tabs_-mnnzup%2Fdus={%22sessionID%22:0%2C%22recordingID%22:%225-f448c2d5-f7b3-4670-81db-2562e14b9593%22%2C%22lastActivity%22:1664487378375}; _lr_hb_-mnnzup%2Fdus={%22heartbeat%22:1664487378375}
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Thu, 29 Sep 2022 22:28:01 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6InMzaTFwTno4M3Mxa09MamFtOWZJTEE9PSIsInZhbHVlIjoiWlE5UzdVYW5KY1NIV3l0OFRidllySGtVZndTOFhiYU9Eb2NPdFZ3VXhVZWtJa2lHTFV1TWdQRDlndTNPSUFEd2E3bUREcW9OTmluR003ekxuN3hSbHJodUZ3RVZOWmpFdkRMbnV2L3djbUhOU0ZRODNrQ2hrQllhQ1ZNYVF5WTAiLCJtYWMiOiIyOWQxZWQ2Njc5NzQyYzBjYTM2NWNjZDA2N2I4YjYxYjhjZTkxNTc1MmVjOGI5OTc5MWUzNDY0M2VlYmQ0Y2Y1IiwidGFnIjoiIn0%3D; expires=Fri, 30-Sep-2022 00:28:04 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IlMrY1VtMEJRYlpBRVREaG56ZlJ4eXc9PSIsInZhbHVlIjoicXoyd1UvYXNQZHB4NFJ4VFFxelI3bFNBQU9wcmhacmk3WlBhQlRValdpcGIzQ0gydEpIWWhpRGpCWGFwN0dBRnB6RlZBYkdpdTY5L0dXWW4wYWxiMDBSakFyS2lFM0k5NlpxTC82RytFTjhkaStQNTFOeWZRNS9hZkRsQ3hPd2IiLCJtYWMiOiI4OGNmY2M4NzBmNzIxMTM2NzEwYjFjZjNkMTc1YmJlMjhjMGVmNDU0OTA4NWZiYzY3YWVjMTZjMDg0MGIzMTRlIiwidGFnIjoiIn0%3D; expires=Fri, 30-Sep-2022 00:28:04 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://delivery.attempt.failure.feedmybot.net/public
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
delivery.attempt.failure.feedmybot.net/public
193.34.145.202301 Moved Permanently 261 B URL HTTP/1.1 delivery.attempt.failure.feedmybot.net/public
IP 193.34.145.202:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7579e9d58c6f7d21d09866f8ce48eca9
749866ce8ea49eccdd1d8ca9ef4d4d7fc2e2cc83
2ba7c083bc89bfedbde3668bdd74df227534f3938fac4a5941ee278edc54f70e
Analyzer Verdict Alert fortinet Phishing
GET /public HTTP/1.1
Host: delivery.attempt.failure.feedmybot.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InMzaTFwTno4M3Mxa09MamFtOWZJTEE9PSIsInZhbHVlIjoiWlE5UzdVYW5KY1NIV3l0OFRidllySGtVZndTOFhiYU9Eb2NPdFZ3VXhVZWtJa2lHTFV1TWdQRDlndTNPSUFEd2E3bUREcW9OTmluR003ekxuN3hSbHJodUZ3RVZOWmpFdkRMbnV2L3djbUhOU0ZRODNrQ2hrQllhQ1ZNYVF5WTAiLCJtYWMiOiIyOWQxZWQ2Njc5NzQyYzBjYTM2NWNjZDA2N2I4YjYxYjhjZTkxNTc1MmVjOGI5OTc5MWUzNDY0M2VlYmQ0Y2Y1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlMrY1VtMEJRYlpBRVREaG56ZlJ4eXc9PSIsInZhbHVlIjoicXoyd1UvYXNQZHB4NFJ4VFFxelI3bFNBQU9wcmhacmk3WlBhQlRValdpcGIzQ0gydEpIWWhpRGpCWGFwN0dBRnB6RlZBYkdpdTY5L0dXWW4wYWxiMDBSakFyS2lFM0k5NlpxTC82RytFTjhkaStQNTFOeWZRNS9hZkRsQ3hPd2IiLCJtYWMiOiI4OGNmY2M4NzBmNzIxMTM2NzEwYjFjZjNkMTc1YmJlMjhjMGVmNDU0OTA4NWZiYzY3YWVjMTZjMDg0MGIzMTRlIiwidGFnIjoiIn0%3D; _lr_tabs_-mnnzup%2Fdus={%22sessionID%22:0%2C%22recordingID%22:%225-f448c2d5-f7b3-4670-81db-2562e14b9593%22%2C%22lastActivity%22:1664487378375}; _lr_hb_-mnnzup%2Fdus={%22heartbeat%22:1664487378375}
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 29 Sep 2022 22:28:04 GMT
Server: Apache
Location: http://delivery.attempt.failure.feedmybot.net/public/
Content-Length: 261
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
delivery.attempt.failure.feedmybot.net/public/
193.34.145.202200 OK 539 B URL HTTP/1.1 delivery.attempt.failure.feedmybot.net/public/
IP 193.34.145.202:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 3491f1cae11b18a83e953bc47716f25b
fbbf71ddf2bd3a1b6b491f8d6eee97964cd41358
24f715f4a4913ce0e33e66f1f42c2a5e9c13777de337e124d3c613e03e8d1928
Analyzer Verdict Alert fortinet Phishing
GET /public/ HTTP/1.1
Host: delivery.attempt.failure.feedmybot.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6InMzaTFwTno4M3Mxa09MamFtOWZJTEE9PSIsInZhbHVlIjoiWlE5UzdVYW5KY1NIV3l0OFRidllySGtVZndTOFhiYU9Eb2NPdFZ3VXhVZWtJa2lHTFV1TWdQRDlndTNPSUFEd2E3bUREcW9OTmluR003ekxuN3hSbHJodUZ3RVZOWmpFdkRMbnV2L3djbUhOU0ZRODNrQ2hrQllhQ1ZNYVF5WTAiLCJtYWMiOiIyOWQxZWQ2Njc5NzQyYzBjYTM2NWNjZDA2N2I4YjYxYjhjZTkxNTc1MmVjOGI5OTc5MWUzNDY0M2VlYmQ0Y2Y1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlMrY1VtMEJRYlpBRVREaG56ZlJ4eXc9PSIsInZhbHVlIjoicXoyd1UvYXNQZHB4NFJ4VFFxelI3bFNBQU9wcmhacmk3WlBhQlRValdpcGIzQ0gydEpIWWhpRGpCWGFwN0dBRnB6RlZBYkdpdTY5L0dXWW4wYWxiMDBSakFyS2lFM0k5NlpxTC82RytFTjhkaStQNTFOeWZRNS9hZkRsQ3hPd2IiLCJtYWMiOiI4OGNmY2M4NzBmNzIxMTM2NzEwYjFjZjNkMTc1YmJlMjhjMGVmNDU0OTA4NWZiYzY3YWVjMTZjMDg0MGIzMTRlIiwidGFnIjoiIn0%3D; _lr_tabs_-mnnzup%2Fdus={%22sessionID%22:0%2C%22recordingID%22:%225-f448c2d5-f7b3-4670-81db-2562e14b9593%22%2C%22lastActivity%22:1664487378375}; _lr_hb_-mnnzup%2Fdus={%22heartbeat%22:1664487378375}
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 22:28:04 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6ImhIUGpQampGWVN5WTJOMGJvbCtXSVE9PSIsInZhbHVlIjoibVZzWHp0UHJjMWF5cm1Zb1RaemdTZXNKaW9qM1hyeDRYMXF2Rm93MzJoK3YxUXlRSlFUZkhwSnE0TlVsQ0xNUUhpS1RUbzA1VkRXMjlQYVJTMmNOQTRyaERqUGpnZk9MUTF3UTNEcmFMOU0wak1FSDg2UnFxZDB1WDdSc2l0SHgiLCJtYWMiOiIxYmNjNTI3MWFiNmJmZGM5NTI0M2Y0OTZhMWE3ZmJjNTNhZGUxYTg1NDk5MWIxN2Q4MzllNTU2YWNlNTQzMmQ5IiwidGFnIjoiIn0%3D; expires=Fri, 30-Sep-2022 00:28:07 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IlVyYkpMN2ovRDErTWsrWlFEb1RiQmc9PSIsInZhbHVlIjoiNDZvbmwrd1dQZlErcUEyMld5dkdPSnZPODlNb0NoRnNhMitLdHIwZW9neXR0NTRjdzVzK1BQeTJQQ2I2RFpYdDhiVWE2RTRCTEZYY0pnQ2JveEx0SThMMUpXdzNkT0NzU0ZBUHJXdEVLeStsNG9jOWZXcGNPWVpGWGFKS1JvVE0iLCJtYWMiOiJkYThiMjYwNGJmMDY0MDZhMzUyMGFhMjg4ZDA4OGNkNTBmODliZGVkMjU4ZDJmMDY5NmRkMTMzNDUzM2E1MDg5IiwidGFnIjoiIn0%3D; expires=Fri, 30-Sep-2022 00:28:07 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
delivery.attempt.failure.feedmybot.net/YPo8yHTPEivGKIG3y9IvYefqRxUNTYKs/
193.34.145.202301 Moved Permanently 293 B URL HTTP/1.1 delivery.attempt.failure.feedmybot.net/YPo8yHTPEivGKIG3y9IvYefqRxUNTYKs/
IP 193.34.145.202:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c63cc4af57cddd219f14f3a0645ff3bf
499d9b8818835e5c4130b0f01cb2f80f56952d59
2217221795e91ba21e5b3f00c06668be5a51723f99c37082db542890a5007961
Analyzer Verdict Alert fortinet Phishing
GET /YPo8yHTPEivGKIG3y9IvYefqRxUNTYKs/ HTTP/1.1
Host: delivery.attempt.failure.feedmybot.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.attempt.failure.feedmybot.net/public/
Cookie: XSRF-TOKEN=eyJpdiI6ImhIUGpQampGWVN5WTJOMGJvbCtXSVE9PSIsInZhbHVlIjoibVZzWHp0UHJjMWF5cm1Zb1RaemdTZXNKaW9qM1hyeDRYMXF2Rm93MzJoK3YxUXlRSlFUZkhwSnE0TlVsQ0xNUUhpS1RUbzA1VkRXMjlQYVJTMmNOQTRyaERqUGpnZk9MUTF3UTNEcmFMOU0wak1FSDg2UnFxZDB1WDdSc2l0SHgiLCJtYWMiOiIxYmNjNTI3MWFiNmJmZGM5NTI0M2Y0OTZhMWE3ZmJjNTNhZGUxYTg1NDk5MWIxN2Q4MzllNTU2YWNlNTQzMmQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVyYkpMN2ovRDErTWsrWlFEb1RiQmc9PSIsInZhbHVlIjoiNDZvbmwrd1dQZlErcUEyMld5dkdPSnZPODlNb0NoRnNhMitLdHIwZW9neXR0NTRjdzVzK1BQeTJQQ2I2RFpYdDhiVWE2RTRCTEZYY0pnQ2JveEx0SThMMUpXdzNkT0NzU0ZBUHJXdEVLeStsNG9jOWZXcGNPWVpGWGFKS1JvVE0iLCJtYWMiOiJkYThiMjYwNGJmMDY0MDZhMzUyMGFhMjg4ZDA4OGNkNTBmODliZGVkMjU4ZDJmMDY5NmRkMTMzNDUzM2E1MDg5IiwidGFnIjoiIn0%3D; _lr_tabs_-mnnzup%2Fdus={%22sessionID%22:0%2C%22recordingID%22:%225-f448c2d5-f7b3-4670-81db-2562e14b9593%22%2C%22lastActivity%22:1664487378375}; _lr_hb_-mnnzup%2Fdus={%22heartbeat%22:1664487378375}
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 29 Sep 2022 22:28:08 GMT
Server: Apache
Location: http://delivery.attempt.failure.feedmybot.net/public/YPo8yHTPEivGKIG3y9IvYefqRxUNTYKs
Content-Length: 293
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
delivery.attempt.failure.feedmybot.net/public/YPo8yHTPEivGKIG3y9IvYefqRxUNTYKs
193.34.145.202508 Loop Detected 288 B URL HTTP/1.1 delivery.attempt.failure.feedmybot.net/public/YPo8yHTPEivGKIG3y9IvYefqRxUNTYKs
IP 193.34.145.202:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ef220a553813acc9ede80405df3b7fd7
382fcf28d5b5ace81e818fa5a2f9c6d54eec179b
d3cffe9f37702e95b3702696987f93ab39922a033e06610275a82a7aae14c96a
Analyzer Verdict Alert fortinet Phishing
GET /public/YPo8yHTPEivGKIG3y9IvYefqRxUNTYKs HTTP/1.1
Host: delivery.attempt.failure.feedmybot.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://delivery.attempt.failure.feedmybot.net/public/
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6ImhIUGpQampGWVN5WTJOMGJvbCtXSVE9PSIsInZhbHVlIjoibVZzWHp0UHJjMWF5cm1Zb1RaemdTZXNKaW9qM1hyeDRYMXF2Rm93MzJoK3YxUXlRSlFUZkhwSnE0TlVsQ0xNUUhpS1RUbzA1VkRXMjlQYVJTMmNOQTRyaERqUGpnZk9MUTF3UTNEcmFMOU0wak1FSDg2UnFxZDB1WDdSc2l0SHgiLCJtYWMiOiIxYmNjNTI3MWFiNmJmZGM5NTI0M2Y0OTZhMWE3ZmJjNTNhZGUxYTg1NDk5MWIxN2Q4MzllNTU2YWNlNTQzMmQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVyYkpMN2ovRDErTWsrWlFEb1RiQmc9PSIsInZhbHVlIjoiNDZvbmwrd1dQZlErcUEyMld5dkdPSnZPODlNb0NoRnNhMitLdHIwZW9neXR0NTRjdzVzK1BQeTJQQ2I2RFpYdDhiVWE2RTRCTEZYY0pnQ2JveEx0SThMMUpXdzNkT0NzU0ZBUHJXdEVLeStsNG9jOWZXcGNPWVpGWGFKS1JvVE0iLCJtYWMiOiJkYThiMjYwNGJmMDY0MDZhMzUyMGFhMjg4ZDA4OGNkNTBmODliZGVkMjU4ZDJmMDY5NmRkMTMzNDUzM2E1MDg5IiwidGFnIjoiIn0%3D; _lr_tabs_-mnnzup%2Fdus={%22sessionID%22:0%2C%22recordingID%22:%225-f448c2d5-f7b3-4670-81db-2562e14b9593%22%2C%22lastActivity%22:1664487378375}; _lr_hb_-mnnzup%2Fdus={%22heartbeat%22:1664487378375}
Upgrade-Insecure-Requests: 1
HTTP/1.1 508 Loop Detected
Date: Thu, 29 Sep 2022 22:28:08 GMT
Server: Apache
Retry-After: 14400
Content-Length: 288
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html
delivery.attempt.failure.feedmybot.net/favicon.ico
193.34.145.202200 OK 0 B URL HTTP/1.1 delivery.attempt.failure.feedmybot.net/favicon.ico
IP 193.34.145.202:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: delivery.attempt.failure.feedmybot.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://delivery.attempt.failure.feedmybot.net/public/YPo8yHTPEivGKIG3y9IvYefqRxUNTYKs
Cookie: XSRF-TOKEN=eyJpdiI6ImhIUGpQampGWVN5WTJOMGJvbCtXSVE9PSIsInZhbHVlIjoibVZzWHp0UHJjMWF5cm1Zb1RaemdTZXNKaW9qM1hyeDRYMXF2Rm93MzJoK3YxUXlRSlFUZkhwSnE0TlVsQ0xNUUhpS1RUbzA1VkRXMjlQYVJTMmNOQTRyaERqUGpnZk9MUTF3UTNEcmFMOU0wak1FSDg2UnFxZDB1WDdSc2l0SHgiLCJtYWMiOiIxYmNjNTI3MWFiNmJmZGM5NTI0M2Y0OTZhMWE3ZmJjNTNhZGUxYTg1NDk5MWIxN2Q4MzllNTU2YWNlNTQzMmQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVyYkpMN2ovRDErTWsrWlFEb1RiQmc9PSIsInZhbHVlIjoiNDZvbmwrd1dQZlErcUEyMld5dkdPSnZPODlNb0NoRnNhMitLdHIwZW9neXR0NTRjdzVzK1BQeTJQQ2I2RFpYdDhiVWE2RTRCTEZYY0pnQ2JveEx0SThMMUpXdzNkT0NzU0ZBUHJXdEVLeStsNG9jOWZXcGNPWVpGWGFKS1JvVE0iLCJtYWMiOiJkYThiMjYwNGJmMDY0MDZhMzUyMGFhMjg4ZDA4OGNkNTBmODliZGVkMjU4ZDJmMDY5NmRkMTMzNDUzM2E1MDg5IiwidGFnIjoiIn0%3D; _lr_tabs_-mnnzup%2Fdus={%22sessionID%22:0%2C%22recordingID%22:%225-f448c2d5-f7b3-4670-81db-2562e14b9593%22%2C%22lastActivity%22:1664487378375}; _lr_hb_-mnnzup%2Fdus={%22heartbeat%22:1664487378375}
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 22:28:08 GMT
Server: Apache
Last-Modified: Wed, 30 Mar 2022 03:35:56 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/x-icon
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a1653c4-6ac0-4775-bb65-fb53f507a331.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a1653c4-6ac0-4775-bb65-fb53f507a331.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2857eba74c8cfa86638732fa2e2bc396
87dad23ff8af0160da95fd2938d8f7fe175dcee4
ce25fb1f742e6f8f1f6b2927e057b0a59c9aef9de42a775b3f3560e41b857a3a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a1653c4-6ac0-4775-bb65-fb53f507a331.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8292
x-amzn-requestid: 9d4cdd8d-70a1-4d59-a69d-2779881e71b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPdZaG9qIAMFYSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f6f-17961e824ded9300794d4a1c;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gBv1vqZapA7tMzYtkLRliR1RIGbStL7ZI-Lm3-FYR2VkfC7ZIwWAVw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 22:22:30 GMT
age: 341
etag: "87dad23ff8af0160da95fd2938d8f7fe175dcee4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2