Report - mail.kb4.io/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939

Report Overview

Submitted URL
mail.kb4.io/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939
IP
54.152.218.127
ASN
#14618 AMAZON-AES
Submitted
2023-03-25 23:11:36
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
secured-login.net	94515	2015-05-21T05:16:01Z	2023-03-29T11:02:55Z	1.7 kB	864 B	54.152.218.127
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-29T05:09:12Z	2.7 kB	44 kB	34.120.237.76
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-29T05:09:11Z	2.7 kB	7.1 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-29T05:09:03Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-29T05:09:31Z	413 B	5.9 kB	34.160.144.191
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-29T05:09:32Z	606 B	127 B	52.89.165.246
mail.kb4.io	171022	2014-10-28T08:00:47Z	2023-03-29T18:35:14Z	1.6 kB	5.8 kB	54.152.218.127
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-29T05:09:31Z	333 B	391 B	34.117.237.239
ocsp.r2m01.amazontrust.com	unknown	2022-10-12T22:43:53Z	2023-03-29T09:11:41Z	700 B	1.9 kB	54.230.80.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-03-25 23:11:39	low	Client IP	Internal IP	ET POLICY Observed DNS Query to KnowBe4 Simulated Phish Domain (kb4 .io)

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	mail.kb4.io/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939	481 B	2023-03-29	2023-03-29
Pretty URL mail.kb4.io/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939 IP 54.152.218.127 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 22:39:15 Last Seen2023-03-29 22:39:15 Times Seen1 Hash f401db6eec106a110d309cdff69a5c3b 2306c976b027cee73899a211d56e40bc91ca9019 0fcca43a78bade9515f7ed61a19efb5c455cff1fdf551cd4cfbaf1b8d5832a6d Loading...

HTTP Transactions (24)

	URL	IP	Response	Size
	mail.kb4.io/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939	54.152.218.127	301 Moved Permanently	0 B
URL HTTP/1.1 mail.kb4.io/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939 IP 54.152.218.127:0 ASN #14618 AMAZON-AES File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939 HTTP/1.1 Host: mail.kb4.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1 HTTP/1.1 301 Moved Permanently Date: Sat, 25 Mar 2023 23:11:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://mail.kb4.io/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 5d9435c884bf4a0777fdf4b57079ae09 7f04b9db47ffeec90ac6397416b7553e5336a550 fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084" Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12397 Expires: Sun, 26 Mar 2023 02:38:02 GMT Date: Sat, 25 Mar 2023 23:11:25 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash dfd491ebe7381221b3674c2c8bf9e566 d2ac5badf17f348c28a52e9db10e6eb80e5a231a 34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C" Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14436 Expires: Sun, 26 Mar 2023 03:12:01 GMT Date: Sat, 25 Mar 2023 23:11:25 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash 84db75194692d4afe13196bda6f22da8 4c1f49bc973a4917f146d93c8d598344edc021f6 a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23 HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sat, 25 Mar 2023 22:27:45 GMT content-type: application/json age: 2620 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 9bb70197d53617b5e6889b890dd2ae26 f3e9b8a743de494529baf2d078a622539f965307 a094a13905b7f1cd89475f9c83f9245580d4c3c7228d51d5c16622aec3c6aa45 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "A094A13905B7F1CD89475F9C83F9245580D4C3C7228D51D5C16622AEC3C6AA45" Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6114 Expires: Sun, 26 Mar 2023 00:53:19 GMT Date: Sat, 25 Mar 2023 23:11:25 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash e7bace7c1e04d44012e37ddffe36e5d5 3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK x-amz-id-2: RhR5yG/0AwaHaVElzKiw0Vx/OtU6sQe5rxgjsakDHDy7SOEhfhXPN/aLP0hqSGSFYC/WRvrpOuk= x-amz-request-id: H140BNQCD8R4EK5S x-amz-server-side-encryption: AES256 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sat, 25 Mar 2023 22:55:05 GMT age: 980 last-modified: Sat, 11 Mar 2023 16:53:15 GMT etag: "e7bace7c1e04d44012e37ddffe36e5d5" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Sat, 25 Mar 2023 23:11:25 GMT content-type: application/json content-length: 12 access-control-expose-headers: content-type vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers access-control-allow-credentials: true strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	ocsp.r2m01.amazontrust.com/	54.230.80.227	200 OK	471 B
URL HTTP/1.1 ocsp.r2m01.amazontrust.com/ IP 54.230.80.227:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 9b70b117d252e55d6915a32147d1c8b5 6c3cc40c5a791d323cf0c8f7a6bb13f78fdfe8c0 bcd331089d23b7e143b87d0b34dea0804382d3511efbbb665ecc31e7c0ecb896 HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Cache-Control: 'max-age=158059' Date: Sat, 25 Mar 2023 23:11:26 GMT Etag: "641e1541-1d7" Server: ECAcc (dcb/7F2F) X-Cache: Miss from cloudfront Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: I3lTqYjLgOzAqlufjdYFWl7tDf2ije3vwtweE1_VynHDZ9OOGkajNg==`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	35.241.9.150	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 35.241.9.150:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sat, 25 Mar 2023 22:17:24 GMT age: 3242 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 717ebcc65cb1390c2509851bac7b5878 1e04e3058329f3809bc01022d441172dcacc1aaa 3c8d41efe14dc75e001ce50aae65e133d90bcb2e2f86b2426cefe7abe4c7b588 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "3C8D41EFE14DC75E001CE50AAE65E133D90BCB2E2F86B2426CEFE7ABE4C7B588" Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5825 Expires: Sun, 26 Mar 2023 00:48:31 GMT Date: Sat, 25 Mar 2023 23:11:26 GMT Connection: keep-alive`

	push.services.mozilla.com/	52.89.165.246	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 52.89.165.246:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: getGkXAFtEZ+EHx1Re0Tzw== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 3rzr3zrXL237zGt5KXFUvfl5t0Y=`

	ocsp.r2m01.amazontrust.com/	54.230.80.227	200 OK	471 B
URL HTTP/1.1 ocsp.r2m01.amazontrust.com/ IP 54.230.80.227:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 9b70b117d252e55d6915a32147d1c8b5 6c3cc40c5a791d323cf0c8f7a6bb13f78fdfe8c0 bcd331089d23b7e143b87d0b34dea0804382d3511efbbb665ecc31e7c0ecb896 HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=171115 Date: Sat, 25 Mar 2023 23:11:26 GMT Etag: "641f66c1-1d7" Expires: Mon, 27 Mar 2023 22:43:21 GMT Last-Modified: Sat, 25 Mar 2023 21:25:21 GMT Server: ECAcc (dcb/7F42) X-Cache: Miss from cloudfront Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: SZseN9e_L3rNajifI_0uHv7NJkp7_KmRRNE4_nImBxG9fLEezrgMjQ== Age: 4680

	secured-login.net/favicon.ico	54.152.218.127	200 OK	0 B
URL HTTP/2 secured-login.net/favicon.ico IP 54.152.218.127:0 ASN #14618 AMAZON-AES File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /favicon.ico HTTP/1.1 Host: secured-login.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://secured-login.net/pages/8f8e1b1301861/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/2 200 OK date: Sat, 25 Mar 2023 23:11:27 GMT content-type: image/vnd.microsoft.icon content-length: 0 last-modified: Fri, 24 Mar 2023 17:36:04 GMT strict-transport-security: max-age=63113904; includeSubDomains; preload X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash b62c9b9530dd66bb7f03ba2ce3d835da bf8560766de78dd925e395f59610ab2f1335e565 62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D" Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8361 Expires: Sun, 26 Mar 2023 01:30:48 GMT Date: Sat, 25 Mar 2023 23:11:27 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash b62c9b9530dd66bb7f03ba2ce3d835da bf8560766de78dd925e395f59610ab2f1335e565 62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D" Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8361 Expires: Sun, 26 Mar 2023 01:30:48 GMT Date: Sat, 25 Mar 2023 23:11:27 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash b62c9b9530dd66bb7f03ba2ce3d835da bf8560766de78dd925e395f59610ab2f1335e565 62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D" Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8361 Expires: Sun, 26 Mar 2023 01:30:48 GMT Date: Sat, 25 Mar 2023 23:11:27 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash b62c9b9530dd66bb7f03ba2ce3d835da bf8560766de78dd925e395f59610ab2f1335e565 62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D" Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8361 Expires: Sun, 26 Mar 2023 01:30:48 GMT Date: Sat, 25 Mar 2023 23:11:27 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg	34.120.237.76	200 OK	9.3 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.3 kB (9290 bytes) Hash d54efd2b1b21530d0da6f7a622ea898e 656849322a4885c98f1f06600f3c4680522d78d0 88d941b88e10152a49bd5e07bb6d7f31a1e3b2841562985d1869f5eea6aacf7b HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9290 x-amzn-requestid: ea6a8cc6-98ee-4d42-9cb7-73087027dde2 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CW1soGZRIAMF0-A= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641f6983-32b521b073af557b282cb6b4;Sampled=0 x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:07 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Miss from cloudfront x-amz-cf-id: e9-yBXmWuJNMgLW5o94HfYQHa-zDPF7IlIv07Wct4ODIgtWaZmAW-w== via: 1.1 f3802d173009698413044360f84de06c.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google date: Sat, 25 Mar 2023 21:37:08 GMT etag: "656849322a4885c98f1f06600f3c4680522d78d0" content-type: image/jpeg age: 5659 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp	34.120.237.76	200 OK	7.0 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 7.0 kB (6976 bytes) Hash e924839a6364def37d8e9d20af3f5999 42e3c97cb72a824d50de5b49e92731a7678c4e73 64725edfecba86737c10dbbc9c70faec28405bb36c565e899889fdaa73979694 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6976 x-amzn-requestid: dd142563-f3de-4390-816b-192fc44c480d x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CW1kWHjMIAMF9xA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641f694e-5dee56692bbe2f35034c9178;Sampled=0 x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: 9XWn6M9cWWvXWTIjT3RRtZFQMCOTuqyRoNcDflwnaBp50j1QoCXfsA== via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google date: Sat, 25 Mar 2023 21:37:07 GMT age: 5660 etag: "42e3c97cb72a824d50de5b49e92731a7678c4e73" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg	34.120.237.76	200 OK	5.4 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 5.4 kB (5424 bytes) Hash c8a2437b3c9ab01cd0e2327d4be5c61a 33573e5a6b6c1912702040c6d880c362baf0c3db 2556646c122f89bfce8467d13bf05e68f735373c8c18a33f7258f37f602673cf HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 5424 x-amzn-requestid: b03169ca-0cc0-49f5-b785-5e29d70048cf x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CW1kWGCnIAMFf7w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641f694e-679415d416cf3b666ec128be;Sampled=0 x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Miss from cloudfront x-amz-cf-id: cMFdcKw6RZYIg35YKKDuetMlSGtT-g4Kc2L-BHA5s0877l_Gg-PqUw== via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google date: Sat, 25 Mar 2023 21:37:07 GMT etag: "33573e5a6b6c1912702040c6d880c362baf0c3db" content-type: image/jpeg age: 5660 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	mail.kb4.io/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939	54.152.85.175	200 OK	4.6 kB
URL HTTP/2 mail.kb4.io/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939 IP 54.152.85.175:0 ASN #14618 AMAZON-AES File type data Size 4.6 kB (4558 bytes) Hash 8720ef87a93dc26a1a059a9ad2859401 8a15b6ad1e05494e4ca93b68ef9ba3e3b9a50234 2fd90c7257e1a8394bc5f18e931bf872605d2a15812bec47331eee40b55ad61e HTTP Headers GET /XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj?cid=1367623939 HTTP/1.1 Host: mail.kb4.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1 HTTP/2 200 OK date: Sat, 25 Mar 2023 23:11:26 GMT content-type: text/html; charset=utf-8 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: no-referrer-when-downgrade etag: W/"74f7e1dbf5eecb3b746fa2345a293bf3" cache-control: max-age=0, private, must-revalidate content-security-policy: x-request-id: 332db37d-1b0d-403f-b262-48d198e69f33 x-protected-by: Sqreen x-runtime: 0.030092 strict-transport-security: max-age=63113904; includeSubDomains; preload X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg	34.120.237.76	200 OK	9.1 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 9.1 kB (9124 bytes) Hash 8dc799aaa2f69ef1109501a605dbdcfd 58cefa986d580ee408fbca288e3e45ba86fb97ac 54fa967d6b96b456416c62140a4eb9b6cda29b80d5083b5d1321b1fb89b3455f HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 9124 x-amzn-requestid: 30a39bb7-d3cc-473a-a5f9-4921367832c5 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CW1kUESiIAMFVEQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641f694e-6c9bb97512fc3c8a3ecedc43;Sampled=0 x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Hit from cloudfront x-amz-cf-id: _4VxID1v_auG0Vuzp87FJoPbgJovhYYYa1fpzQZze51I6HwFKbja6w== via: 1.1 6af36c6902a46beec743522a9bbb3ab0.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google date: Sat, 25 Mar 2023 21:37:20 GMT age: 5647 etag: "58cefa986d580ee408fbca288e3e45ba86fb97ac" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg	34.120.237.76	200 OK	7.8 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 7.8 kB (7823 bytes) Hash 9b21b2c60279839939b60afd83d047fa 544c243fe2d69156f50eec156a62de127128a028 091a59214cfc0af90b4cb820bb521577ae63e862ec10160b8f64c9a9e593630d HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 7823 x-amzn-requestid: c528eae7-69b4-4669-8c15-2b306586b84b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: CW1kWHx5IAMFlEA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-641f694e-340c77491ea4440b340e3822;Sampled=0 x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT x-amz-cf-pop: HIO52-P1, SEA19-C1 x-cache: Miss from cloudfront x-amz-cf-id: 2uV186j4t31jcyYDdXxsw5YgM6P5nCbzmgXWvG-pVSpvsjXz6Fsp0A== via: 1.1 e39f48cc8f516dc1072afdb086c71f32.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google date: Sat, 25 Mar 2023 21:37:19 GMT etag: "544c243fe2d69156f50eec156a62de127128a028" content-type: image/jpeg age: 5648 cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	secured-login.net/pages/8f8e1b1301861/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj	54.152.218.127	200 OK	0 B
URL HTTP/2 secured-login.net/pages/8f8e1b1301861/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj IP 54.152.218.127:0 ASN #14618 AMAZON-AES File type Size 0 B (0 bytes) Hash HTTP Headers GET /pages/8f8e1b1301861/XUzJGVmFFOUxWVzlJZVU5MkwxaFhOVWRqUzNaWlZVOU1PVzFVYW5aSVRreFNhVFZLZDNaMmVVc3lUMGhIVG1kMWJqWnhSblV6UmtVM2VqUklVbXRoZVZKblNXZ3ZSREZIVWxGMmFrYzFVbkZXZGtJek5rbEtkelY1VFdZMVJsRnhPSEp1UVhFMVlXdERNR1E1WW1od1VsaG1Wa0ZZY1hCcWJtWXllSFZqUVVKMFYwbzJTemx5WlRFMmQwRldhMFp3V0daVFYxSklXVXBCUzFadk5IaElZMmwzZG5acE5rZ3ZNRVp6UFMwdFZuaFlaMVpDUTA5NWRHWjZabk4zWjBVeU0wUTBRVDA5LS1jMWE3M2U2YzBjMDk3YTRlNGFlZmQyYmViOWNiZGY5NmIzYzJhYTdj HTTP/1.1 Host: secured-login.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://mail.kb4.io/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site HTTP/2 200 OK date: Sat, 25 Mar 2023 23:11:26 GMT content-type: text/html; charset=utf-8 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: no-referrer-when-downgrade etag: W/"01a432b43b929122a2c355002baf21a4" cache-control: max-age=0, private, must-revalidate content-security-policy: x-request-id: 839a0a99-7c82-48fd-8594-c07db6f9dba2 x-protected-by: Sqreen x-runtime: 0.044541 strict-transport-security: max-age=63113904; includeSubDomains; preload X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (24)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type