i.dkundservice-postnord.hardcars.ro/public/X2OwoT3bY1FbomKxFSn2KUgrXrVhepX7
89.35.173.163302 Found 442 B URL HTTP/1.1 i.dkundservice-postnord.hardcars.ro/public/X2OwoT3bY1FbomKxFSn2KUgrXrVhepX7
IP 89.35.173.163:0
ASN #59854 Top Level Hosting SRL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e981a8809a99f54f67d6abec26aadeae
a3020ac6308144727a49ca0e7a36ed7107e919b5
6bc6367a1d22941aa5da27932a05414c413a1d4670a65673aa096dff3cfea769
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /public/X2OwoT3bY1FbomKxFSn2KUgrXrVhepX7 HTTP/1.1
Host: i.dkundservice-postnord.hardcars.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IklVRG9iejNud01GMjFHdStyeVAwWFE9PSIsInZhbHVlIjoiQmUvbmlSUzNqdjY1c2haMm55MExWNzFXOE1XSGJaNWZ4NXlJYUQ2cDN6OVJqYlhCeDFGTk4zSWVUbndPSXFMQjVDTzBkcW5oL0tNRTAxNXZvYTJLQVNPYWcxaHlraEpPcFFIWVFvZWJQMkw3SDRVcUdqUjJGL0g1a3IyajkyaWQiLCJtYWMiOiJiZDhiZDE3MmRjNWNiNTg2M2RhODBkZGI1OGE1MTdjMjYwNmVhZGZlYTc3NTg5MDdiZDJiYjJiOGQyMGJiNzk5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InVObDVVSjBBaCt6c2lvQ3JmeDFPNkE9PSIsInZhbHVlIjoibEcyMi90anB1RVA0TFoybkRET3RDWVdVN0lhVHMxRzVza1FvdmhQdFd5TmVMV3YxK2hvNUlYcHErVTVpdTdmMGFaRUd6YWM3cFdBZk1oak9qMFQyQmFFTTArRVQ1dkJrN3dpYlVjTEtsSkxCUDFIRXhrMmRFL01wanR0WkU2Z2siLCJtYWMiOiI1ZTExMjZmNDMwYWE0YWVkYzE0YzAwNDE4ZTYwMzIzMTVhODVjNDhhMmIzODc2Y2Y0NWNkMDMyN2ExNjZkYzk1IiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 28 Dec 2022 01:43:59 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IlhnRDN5UU84WWJieXFHMy9aOTV5NWc9PSIsInZhbHVlIjoidE42QThsbEx5ZlQ4azQxbU44ZTg2Wno3RzlRZkozUU5jWFlqbGFzZENnRVBqV0krUExSM3I5ZUtCdiswOXRsU0t3UzFqam82NllKS1hkd1dqdVZueElkNGxNVlVRSWFOQktpSk1hdXJXb3llcVNsWUw5aGhoYnVreTBwTnBWRGwiLCJtYWMiOiIzMDhjYjExYzBkZjMwOGE5NGI2ODc3ZmZhNzBkMGYwMmRkNWY1NmZlZThkNTRkOWQ4NTgxMmJkZGI0ZDRhM2I5IiwidGFnIjoiIn0%3D; expires=Wed, 28-Dec-2022 03:43:59 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IjlGUFY4OXFpekZDdktoZjVPNXNIVVE9PSIsInZhbHVlIjoiUWg5T2xmRTVoaUNJSXhPNHFBY2MwM0ZnaTVWdFd2UFQ5cTRwcElRWFROLzFFdURRejJqZ29pWC9qM3lRandpTnNNQTJBQVBXT2ZKYmNscm0xWlJ0NzFQWEtGQXNVT1NOV2F2OE8zSy9FQ09Ja1VQdnp6b3AybG5xditrck5tbWkiLCJtYWMiOiIyMzJmZjEzYWIwNmM1MDFkYTBiMjIxN2Y2NWFkYTk5ZWRjY2VkNmMxMDQ1ZDk4MTQzMzE5YjdiM2RmNjg4NTU3IiwidGFnIjoiIn0%3D; expires=Wed, 28-Dec-2022 03:43:59 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://i.dkundservice-postnord.hardcars.ro/public
Keep-Alive: timeout=2, max=150
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 78f1f94544ef06b96bb43283f59d100f
fa2f1a3730a98c6fa5ebf976143fb6093a7298be
889af22ee304adea2e23491acbc89ebdcaf322e8c45af2bebf7520e3e9b0a6a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "889AF22EE304ADEA2E23491ACBC89EBDCAF322E8C45AF2BEBF7520E3E9B0A6A9"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15703
Expires: Wed, 28 Dec 2022 06:05:43 GMT
Date: Wed, 28 Dec 2022 01:44:00 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e717435470c9f4f06b174d7100c6a98f
292150251495b243c384e0c676a258597ba7f4d8
91ce8257662cb8cea9cc3c74cda1d95dba421daa466b0ac231fa433e0c58e6c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91CE8257662CB8CEA9CC3C74CDA1D95DBA421DAA466B0AC231FA433E0C58E6C6"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4702
Expires: Wed, 28 Dec 2022 03:02:22 GMT
Date: Wed, 28 Dec 2022 01:44:00 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b2d59bdbb1ca6324590988ec031cf1fc
bfd4e25af37dcde4bac38d9b178c5ac8e50f8834
cef2180120ef42ff09d54577229c058d41d2c569d485f5a6dcfadc74bf8aa647
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEF2180120EF42FF09D54577229C058D41D2C569D485F5A6DCFADC74BF8AA647"
Last-Modified: Mon, 26 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11214
Expires: Wed, 28 Dec 2022 04:50:54 GMT
Date: Wed, 28 Dec 2022 01:44:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 28 Dec 2022 00:46:44 GMT
content-type: application/json
age: 3436
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9TQpffj87xcLIQfGEGuI8pGGKtw8ZeeP04VDK1nbr2ZZfKFOTHMGWAS7B//ks6h6plrM1AQJSIvFsI3bBBOA2w==
x-amz-request-id: 1BA38CPA0S2YWBDF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 28 Dec 2022 00:55:57 GMT
age: 2883
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
i.dkundservice-postnord.hardcars.ro/public
89.35.173.163301 Moved Permanently 258 B URL HTTP/1.1 i.dkundservice-postnord.hardcars.ro/public
IP 89.35.173.163:0
ASN #59854 Top Level Hosting SRL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 35d3bb45e7876e5b0f9a7a092651ca2f
4d3241e56b48696bdaabfaa4b7daf7c12c10a404
4a42a51b0e1d439859bc7b800f0308264731291f3a9ca4ded63885ef706bb35d
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /public HTTP/1.1
Host: i.dkundservice-postnord.hardcars.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlhnRDN5UU84WWJieXFHMy9aOTV5NWc9PSIsInZhbHVlIjoidE42QThsbEx5ZlQ4azQxbU44ZTg2Wno3RzlRZkozUU5jWFlqbGFzZENnRVBqV0krUExSM3I5ZUtCdiswOXRsU0t3UzFqam82NllKS1hkd1dqdVZueElkNGxNVlVRSWFOQktpSk1hdXJXb3llcVNsWUw5aGhoYnVreTBwTnBWRGwiLCJtYWMiOiIzMDhjYjExYzBkZjMwOGE5NGI2ODc3ZmZhNzBkMGYwMmRkNWY1NmZlZThkNTRkOWQ4NTgxMmJkZGI0ZDRhM2I5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlGUFY4OXFpekZDdktoZjVPNXNIVVE9PSIsInZhbHVlIjoiUWg5T2xmRTVoaUNJSXhPNHFBY2MwM0ZnaTVWdFd2UFQ5cTRwcElRWFROLzFFdURRejJqZ29pWC9qM3lRandpTnNNQTJBQVBXT2ZKYmNscm0xWlJ0NzFQWEtGQXNVT1NOV2F2OE8zSy9FQ09Ja1VQdnp6b3AybG5xditrck5tbWkiLCJtYWMiOiIyMzJmZjEzYWIwNmM1MDFkYTBiMjIxN2Y2NWFkYTk5ZWRjY2VkNmMxMDQ1ZDk4MTQzMzE5YjdiM2RmNjg4NTU3IiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 28 Dec 2022 01:43:59 GMT
Server: Apache
Location: http://i.dkundservice-postnord.hardcars.ro/public/
Content-Length: 258
Keep-Alive: timeout=2, max=149
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Dec 2022 01:44:00 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 28 Dec 2022 01:08:08 GMT
age: 2152
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
i.dkundservice-postnord.hardcars.ro/public/
89.35.173.163200 OK 558 B URL HTTP/1.1 i.dkundservice-postnord.hardcars.ro/public/
IP 89.35.173.163:0
ASN #59854 Top Level Hosting SRL
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 647d08a7d5eb19568607d95b80f2381c
3e66b2940691f2b4368250fab7223efab769003a
e20abffdb8e20143ce44b6d262719e666388e5852dd3d8876a66f9165c027796
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /public/ HTTP/1.1
Host: i.dkundservice-postnord.hardcars.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: XSRF-TOKEN=eyJpdiI6IlhnRDN5UU84WWJieXFHMy9aOTV5NWc9PSIsInZhbHVlIjoidE42QThsbEx5ZlQ4azQxbU44ZTg2Wno3RzlRZkozUU5jWFlqbGFzZENnRVBqV0krUExSM3I5ZUtCdiswOXRsU0t3UzFqam82NllKS1hkd1dqdVZueElkNGxNVlVRSWFOQktpSk1hdXJXb3llcVNsWUw5aGhoYnVreTBwTnBWRGwiLCJtYWMiOiIzMDhjYjExYzBkZjMwOGE5NGI2ODc3ZmZhNzBkMGYwMmRkNWY1NmZlZThkNTRkOWQ4NTgxMmJkZGI0ZDRhM2I5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlGUFY4OXFpekZDdktoZjVPNXNIVVE9PSIsInZhbHVlIjoiUWg5T2xmRTVoaUNJSXhPNHFBY2MwM0ZnaTVWdFd2UFQ5cTRwcElRWFROLzFFdURRejJqZ29pWC9qM3lRandpTnNNQTJBQVBXT2ZKYmNscm0xWlJ0NzFQWEtGQXNVT1NOV2F2OE8zSy9FQ09Ja1VQdnp6b3AybG5xditrck5tbWkiLCJtYWMiOiIyMzJmZjEzYWIwNmM1MDFkYTBiMjIxN2Y2NWFkYTk5ZWRjY2VkNmMxMDQ1ZDk4MTQzMzE5YjdiM2RmNjg4NTU3IiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Dec 2022 01:44:00 GMT
Server: Apache
Cache-Control: no-cache, private
Set-Cookie: XSRF-TOKEN=eyJpdiI6IndEbFEyaE5BNFp1UmxaTHgzWkI5dFE9PSIsInZhbHVlIjoiTHU2dzRpdzh0c2RtUGRrbURROGUrQ2pqLzVWYmVjWko4bGphOTEwOXhRM09DYk11b1R6T0RZRW13RVJlMVpFRGlVRjRDRVBqSjZXejh4SXd3RWN6ZGJIdzdPTWxyMkVLRHFMWDBDY2pIdzk4VnhMcEl5VENNZkw3SXdkZ0htOUUiLCJtYWMiOiJkMTUzZmYwZjUxMzg4MzYyYjY0MWY1MTM5MmRiOWQ0MjE1YTJiOTQ2MTY5OTJlMTVhMzY5NWUyNWI0ZmE3OTQ5IiwidGFnIjoiIn0%3D; expires=Wed, 28-Dec-2022 03:44:00 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6InlacnpSckNINlBzMzRSZDNORTJrdGc9PSIsInZhbHVlIjoiZjFvOGUwQ05VZ0JlTFVNNXpkbHlJaUZ1RC9QV0htNUN6R0dtbXd5TEM3RU5OZkxGRVd2UzFGTmxjNGRjbDBKSDJiYmh5blF6VXNCMGplbk9QWEExL3lrRng2UFZxcUlNc2lCTEJScGhpUXVNSzdyeTladnlhVi9mcjNIT0ordloiLCJtYWMiOiJiZjgzNDdiMDE0MmJmN2JjM2IyMDVlMmE2YTRlZWRhMzg0OWVjMWQ4NGU4ODUxZTA4OWEyZjYxNTFmNTc1NTUwIiwidGFnIjoiIn0%3D; expires=Wed, 28-Dec-2022 03:44:00 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Keep-Alive: timeout=2, max=148
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 60b8396db0bbfa5f2ae7e34c9d04ebcc
50b6c68aa2b2a459315a9989f5d3e326e8ad5539
c10a1e0f984b121958a5cfa3b45b746db85d33c9073fcacb019d9bb27ef3b073
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 634
Cache-Control: max-age=113607
Content-Type: application/ocsp-response
Date: Wed, 28 Dec 2022 01:44:01 GMT
Etag: "63aab5ae-1d7"
Expires: Thu, 29 Dec 2022 09:17:28 GMT
Last-Modified: Tue, 27 Dec 2022 09:06:54 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
151.101.194.133200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP 151.101.194.133:0
Hash 6aef43606fbdf975c9a43089e94fd4c7
40dfd0d47af4a9d4ae3ef5b8fdda483a6c700a5b
734d8786833eebfab5cfcebb357f7df30cb28bcafd818be77cf1f4b4a87ae9a5
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1462
Content-Type: application/ocsp-response
Etag: "5A84F97223008F7ED192A5E6D58DCB1288DC5619"
Expires: Wed, 28 Dec 2022 13:00:00 UTC
Last-Modified: Wed, 28 Dec 2022 01:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
Accept-Ranges: bytes
Date: Wed, 28 Dec 2022 01:44:01 GMT
Via: 1.1 varnish
Age: 376
X-Served-By: cache-bma1668-BMA
X-Cache: HIT
X-Cache-Hits: 25
X-Timer: S1672191841.018973,VS0,VE0
i.dkundservice-postnord.hardcars.ro/dGyR67M3E1DSiPMxEWzOYlOPvbDuIbD4/
89.35.173.163404 Not Found 0 B URL HTTP/1.1 i.dkundservice-postnord.hardcars.ro/dGyR67M3E1DSiPMxEWzOYlOPvbDuIbD4/
IP 89.35.173.163:0
ASN #59854 Top Level Hosting SRL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /dGyR67M3E1DSiPMxEWzOYlOPvbDuIbD4/ HTTP/1.1
Host: i.dkundservice-postnord.hardcars.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://i.dkundservice-postnord.hardcars.ro/public/
Cookie: XSRF-TOKEN=eyJpdiI6IndEbFEyaE5BNFp1UmxaTHgzWkI5dFE9PSIsInZhbHVlIjoiTHU2dzRpdzh0c2RtUGRrbURROGUrQ2pqLzVWYmVjWko4bGphOTEwOXhRM09DYk11b1R6T0RZRW13RVJlMVpFRGlVRjRDRVBqSjZXejh4SXd3RWN6ZGJIdzdPTWxyMkVLRHFMWDBDY2pIdzk4VnhMcEl5VENNZkw3SXdkZ0htOUUiLCJtYWMiOiJkMTUzZmYwZjUxMzg4MzYyYjY0MWY1MTM5MmRiOWQ0MjE1YTJiOTQ2MTY5OTJlMTVhMzY5NWUyNWI0ZmE3OTQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InlacnpSckNINlBzMzRSZDNORTJrdGc9PSIsInZhbHVlIjoiZjFvOGUwQ05VZ0JlTFVNNXpkbHlJaUZ1RC9QV0htNUN6R0dtbXd5TEM3RU5OZkxGRVd2UzFGTmxjNGRjbDBKSDJiYmh5blF6VXNCMGplbk9QWEExL3lrRng2UFZxcUlNc2lCTEJScGhpUXVNSzdyeTladnlhVi9mcjNIT0ordloiLCJtYWMiOiJiZjgzNDdiMDE0MmJmN2JjM2IyMDVlMmE2YTRlZWRhMzg0OWVjMWQ4NGU4ODUxZTA4OWEyZjYxNTFmNTc1NTUwIiwidGFnIjoiIn0%3D
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Date: Wed, 28 Dec 2022 01:44:00 GMT
Server: Apache
Content-Length: 0
Keep-Alive: timeout=2, max=147
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
i.dkundservice-postnord.hardcars.ro/favicon.ico
89.35.173.163404 Not Found 0 B URL HTTP/1.1 i.dkundservice-postnord.hardcars.ro/favicon.ico
IP 89.35.173.163:0
ASN #59854 Top Level Hosting SRL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /favicon.ico HTTP/1.1
Host: i.dkundservice-postnord.hardcars.ro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://i.dkundservice-postnord.hardcars.ro/dGyR67M3E1DSiPMxEWzOYlOPvbDuIbD4/
Cookie: XSRF-TOKEN=eyJpdiI6IndEbFEyaE5BNFp1UmxaTHgzWkI5dFE9PSIsInZhbHVlIjoiTHU2dzRpdzh0c2RtUGRrbURROGUrQ2pqLzVWYmVjWko4bGphOTEwOXhRM09DYk11b1R6T0RZRW13RVJlMVpFRGlVRjRDRVBqSjZXejh4SXd3RWN6ZGJIdzdPTWxyMkVLRHFMWDBDY2pIdzk4VnhMcEl5VENNZkw3SXdkZ0htOUUiLCJtYWMiOiJkMTUzZmYwZjUxMzg4MzYyYjY0MWY1MTM5MmRiOWQ0MjE1YTJiOTQ2MTY5OTJlMTVhMzY5NWUyNWI0ZmE3OTQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InlacnpSckNINlBzMzRSZDNORTJrdGc9PSIsInZhbHVlIjoiZjFvOGUwQ05VZ0JlTFVNNXpkbHlJaUZ1RC9QV0htNUN6R0dtbXd5TEM3RU5OZkxGRVd2UzFGTmxjNGRjbDBKSDJiYmh5blF6VXNCMGplbk9QWEExL3lrRng2UFZxcUlNc2lCTEJScGhpUXVNSzdyeTladnlhVi9mcjNIT0ordloiLCJtYWMiOiJiZjgzNDdiMDE0MmJmN2JjM2IyMDVlMmE2YTRlZWRhMzg0OWVjMWQ4NGU4ODUxZTA4OWEyZjYxNTFmNTc1NTUwIiwidGFnIjoiIn0%3D
HTTP/1.1 404 Not Found
Date: Wed, 28 Dec 2022 01:44:00 GMT
Server: Apache
Content-Length: 0
Keep-Alive: timeout=2, max=146
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
34.213.140.56101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.213.140.56:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9cPHf8eWO24nKZEIp6gn+w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: s8fRt7kni902AMsFpHtk630RbKQ=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5155
Expires: Wed, 28 Dec 2022 03:09:57 GMT
Date: Wed, 28 Dec 2022 01:44:02 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5155
Expires: Wed, 28 Dec 2022 03:09:57 GMT
Date: Wed, 28 Dec 2022 01:44:02 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5155
Expires: Wed, 28 Dec 2022 03:09:57 GMT
Date: Wed, 28 Dec 2022 01:44:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F346e7d95-abf9-4783-baa6-85137bb9cc29.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F346e7d95-abf9-4783-baa6-85137bb9cc29.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8ab36b0d168174ef2d960be9810fdb2d
7c8a7415cab3ef88b5d1204af214a687b1676dda
a1d842fd02273603db0090d34c317d7a3ce3e5f00f29271d45fc4ed6d09ee21e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F346e7d95-abf9-4783-baa6-85137bb9cc29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7817
x-amzn-requestid: 21a68509-6fec-48b3-8bce-fb2ebfab3289
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0yuCEVwIAMFUrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab64c0-5e23ceec731631d93e01e2c8;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:33:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XW37o6TY-ynuySDq8QgtRV96fMBxkZeslHuLJNWBDLaiSz-fHJSQDA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:35:40 GMT
age: 14902
etag: "7c8a7415cab3ef88b5d1204af214a687b1676dda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3287d42c-2755-4421-8911-4b6477d17b80.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3287d42c-2755-4421-8911-4b6477d17b80.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c2103096a01cc69f669b193bc887f695
b781600aa2cab0ae29deb75f7a113897b443e94e
dd73e8bbba0a8e9361586ea5c9c4f6dd5adeab34dea29ddb90811ddd2aa50706
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3287d42c-2755-4421-8911-4b6477d17b80.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7155
x-amzn-requestid: 2927f54b-9160-4839-8697-e45f1e531cdf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0ys9GiGoAMFU0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab64b9-702e0f54392ac9354b3a7de9;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:33:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: wckJI0ybNzLhQGfH_-h2jAxo7d8aeT976UQejCQjXpp5otKNwRIwCA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:35:33 GMT
age: 14909
etag: "b781600aa2cab0ae29deb75f7a113897b443e94e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d43b473-21c7-4775-9398-1bdecb4d7d28.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d43b473-21c7-4775-9398-1bdecb4d7d28.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b373925ce249ca67e6984c436f5cd2b8
ddbc25025b933587990f8e9c32e91c9773256840
7d3c992b715283efeba9bee2e5c08042267017e76074ca6aad870e1dd45b4564
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d43b473-21c7-4775-9398-1bdecb4d7d28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9007
x-amzn-requestid: 15b3b2e5-d493-4b54-aab4-7374bf892e83
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: drrFbESxIAMFikw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a7beef-37f4ab8e7738b186705bb1db;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 03:09:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SgjNBdI4lkk3DIdROxkZ8sdadoe-pewXA9Q5M55pGe-LNk012lLFmQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 03:23:05 GMT
age: 80457
etag: "ddbc25025b933587990f8e9c32e91c9773256840"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2be386a4-d784-4e1f-8438-ac7fa15c7807.webp
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2be386a4-d784-4e1f-8438-ac7fa15c7807.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5854187fd3f867d811e9aab339f2a074
faf594f1418adb7bcec9391365b39efbcb2e41bf
ee67d43a9ba676a76fdc35db6f960d211ad8bcb288e5007ccc0c0d6e096f2f9a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2be386a4-d784-4e1f-8438-ac7fa15c7807.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7677
x-amzn-requestid: 5769904d-11e8-4ea1-bd47-75817ba0f808
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0ytDHZyIAMFe-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab64b9-1abcb3673547ae3d0dc23114;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:33:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: EQiZVmTEmifegyy8M0bIVAbbvX6X4aFXMYqKH357wCCcpZOd-3g-Jw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:35:33 GMT
age: 14909
etag: "faf594f1418adb7bcec9391365b39efbcb2e41bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F320076e5-91eb-4ce2-8749-b75bf33f3d51.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F320076e5-91eb-4ce2-8749-b75bf33f3d51.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 50bfb6c346b518c59209f84b7f37f27d
6baa49e70d82eb1080c1387926dbc1eef93f2864
254f4ab5f66022a2136df243d505482bb22454ba9d3a34c4ee4b46f612a8da66
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F320076e5-91eb-4ce2-8749-b75bf33f3d51.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13063
x-amzn-requestid: 2b0d3abc-0ef1-4255-84de-8ad9ec0948c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0z9YG7WIAMF7AQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab66bb-5bc1bc4d55f7424628b2df63;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 21:42:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: swcdG_jfUD7ignxUfxZHDzdjeCsbj60uhQEbJUBtCiLtmYejhzwOWw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 21:50:10 GMT
age: 14032
etag: "6baa49e70d82eb1080c1387926dbc1eef93f2864"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6fab928-0c92-4565-8e58-030c361d75b4.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6fab928-0c92-4565-8e58-030c361d75b4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 81652d5fbc9dc20c2edcec49924d9243
2e43f096e38b6d709aac12c82074335089726c9d
539553c2039ac27b7538546ceef5e45c33ac6e7a86452d815997beb139816992
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6fab928-0c92-4565-8e58-030c361d75b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7151
x-amzn-requestid: 1e6c85dd-7932-4af1-b3b8-6164dfb257e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: du-DJHQBoAMFdKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a9107a-5629d851487604d339e6a54f;Sampled=0
x-amzn-remapped-date: Mon, 26 Dec 2022 03:09:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: BChsvFJkSGuWvupBi2XgO-4oVCREWdX4_48oRICJRio_Ta3bR2s_lQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Dec 2022 03:56:06 GMT
age: 78476
etag: "2e43f096e38b6d709aac12c82074335089726c9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2