r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10028
Expires: Fri, 23 Sep 2022 08:14:14 GMT
Date: Fri, 23 Sep 2022 05:27:06 GMT
Connection: keep-alive
www.marketing.open-transfer.com/bb/ZmRmUyBdWmRSH2NgXlZjYDFfZFZSHl9nH2BjWCAoISYpICUiJyomJx4iKSkmJyUeJCglJSMeJSclJCUeIiIoISoeIiIoIiEgaGhoH15SY1xWZVpfWB9gYVZfHmVjUl9kV1ZjH1RgXiAgMjNgXWUxVFpjVGZdUmVaYF8fVFlSX1RWHlpeYWNWZGRaYF8fVGBeICEgRl9kZlM9Wl9c
5.252.171.20302 Found 446 B URL HTTP/1.1 www.marketing.open-transfer.com/bb/ZmRmUyBdWmRSH2NgXlZjYDFfZFZSHl9nH2BjWCAoISYpICUiJyomJx4iKSkmJyUeJCglJSMeJSclJCUeIiIoISoeIiIoIiEgaGhoH15SY1xWZVpfWB9gYVZfHmVjUl9kV1ZjH1RgXiAgMjNgXWUxVFpjVGZdUmVaYF8fVFlSX1RWHlpeYWNWZGRaYF8fVGBeICEgRl9kZlM9Wl9c
IP 5.252.171.20:0
ASN #209945 Viasat Cloud SRL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (374), with CRLF line terminators
Hash fd6a4a39556d28b16a95693bfe83fd29
2ec0189ea344e575f45334122b00ca390a87c74d
5b724f71a2a1b4410a3e42c308edfd8001dd6eccc8ea2a381c9f52277d462409
Analyzer Verdict Alert fortinet Phishing
GET /bb/ZmRmUyBdWmRSH2NgXlZjYDFfZFZSHl9nH2BjWCAoISYpICUiJyomJx4iKSkmJyUeJCglJSMeJSclJCUeIiIoISoeIiIoIiEgaGhoH15SY1xWZVpfWB9gYVZfHmVjUl9kV1ZjH1RgXiAgMjNgXWUxVFpjVGZdUmVaYF8fVFlSX1RWHlpeYWNWZGRaYF8fVGBeICEgRl9kZlM9Wl9c HTTP/1.1
Host: www.marketing.open-transfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Fri, 23 Sep 2022 05:27:05 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: http://www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 446
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 05:05:44 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: uJ7HFiLoDO2UhLQ9WVVdvi3uv-x_1qKA62RO8ZfNAr9K4gMdZAliZg==
Age: 1282
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.35200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.35:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MO-If9_NdFPF3VsBMbuZfoN-wjEXxZRPZkrgAMjvetWfwLaf1INgdg==
age: 3112
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 05:27:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
5.252.171.20200 OK 12 kB URL HTTP/1.1 www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
IP 5.252.171.20:0
ASN #209945 Viasat Cloud SRL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (2568), with CRLF line terminators
Hash de827631e9ac51bcbf376116fa2a46c7
07264d3521e14aed1e62f76b5264a0c2f260c794
35af55f405f55286f3df9957ca9d6bd0ca2fc5163737d7605f07aa8b445129bf
Analyzer Verdict Alert fortinet Phishing
GET /unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl HTTP/1.1
Host: www.marketing.open-transfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 05:27:05 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Content-Type: text/html; charset=utf-8
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 12044
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
www.marketing.open-transfer.com/tracking/ScriptResource.axd?d=B4kEf2TY0PEiK25J5CcncYftEiyeiU_ieC-VeOWkr6q5gThIaAF7wbHVRmIRB8kzOsy6XXpNESlEW2RZyU0nvYb6zVJ8SLpOsknSgeMvzfq_SvIOVZmRHwEBMlY67yk-wFwFL6-gQ7kKNqzVwwTrKfKmYyDkNiXM4SL1FCqTlm41&t=ffffffffcdd1bd0a
5.252.171.20200 OK 5.5 kB URL HTTP/1.1 www.marketing.open-transfer.com/tracking/ScriptResource.axd?d=B4kEf2TY0PEiK25J5CcncYftEiyeiU_ieC-VeOWkr6q5gThIaAF7wbHVRmIRB8kzOsy6XXpNESlEW2RZyU0nvYb6zVJ8SLpOsknSgeMvzfq_SvIOVZmRHwEBMlY67yk-wFwFL6-gQ7kKNqzVwwTrKfKmYyDkNiXM4SL1FCqTlm41&t=ffffffffcdd1bd0a
IP 5.252.171.20:0
ASN #209945 Viasat Cloud SRL
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash cd81a5effc23af770be1c6ad035a5e4e
ec3cdf31293e2e43fb1f189decc18019cd3d2f23
0bbe6b1d897c994aa54d02d1692b8dd4d64a2f28d809f954ce6ba356c7d16abb
GET /tracking/ScriptResource.axd?d=B4kEf2TY0PEiK25J5CcncYftEiyeiU_ieC-VeOWkr6q5gThIaAF7wbHVRmIRB8kzOsy6XXpNESlEW2RZyU0nvYb6zVJ8SLpOsknSgeMvzfq_SvIOVZmRHwEBMlY67yk-wFwFL6-gQ7kKNqzVwwTrKfKmYyDkNiXM4SL1FCqTlm41&t=ffffffffcdd1bd0a HTTP/1.1
Host: www.marketing.open-transfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 05:27:05 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Sat, 23 Sep 2023 05:25:46 GMT
Last-Modified: Fri, 23 Sep 2022 05:25:46 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 5479
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Fri, 23 Sep 2022 05:03:22 GMT
Expires: Fri, 23 Sep 2022 05:16:48 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: P13auQ6HDljHtkG-pNGt3lPYybV0Ce43EbWHqq5HB84NaQdsFcePKg==
Age: 1424
www.marketing.open-transfer.com/tracking/ScriptResource.axd?d=SpaDZZm117_Q5_-4dMCxLUd1vHPLXVhsDe5IYHQPwoOZVrXSyZzOKZqSsSUeWp5avPl4g4qRhJ371AUcTv4fePEWJerdywTFQRAAT6U6cxwSbiiuO32u7s1yY8-hZBsLqFWW-BdEj1qOBDJwlH2leQ2&t=ffffffffd98c31ca
5.252.171.20200 OK 2.1 kB URL HTTP/1.1 www.marketing.open-transfer.com/tracking/ScriptResource.axd?d=SpaDZZm117_Q5_-4dMCxLUd1vHPLXVhsDe5IYHQPwoOZVrXSyZzOKZqSsSUeWp5avPl4g4qRhJ371AUcTv4fePEWJerdywTFQRAAT6U6cxwSbiiuO32u7s1yY8-hZBsLqFWW-BdEj1qOBDJwlH2leQ2&t=ffffffffd98c31ca
IP 5.252.171.20:0
ASN #209945 Viasat Cloud SRL
File type Unicode text, UTF-8 (with BOM) text
Hash 22dbcda895f9546767c140fe93520697
3634118d89439253c8941a201fb6a8adfb366710
57f8c497dc5dd1aff6de4279ae15b6b49868c31c13a0b94559c067fabc26b2ba
GET /tracking/ScriptResource.axd?d=SpaDZZm117_Q5_-4dMCxLUd1vHPLXVhsDe5IYHQPwoOZVrXSyZzOKZqSsSUeWp5avPl4g4qRhJ371AUcTv4fePEWJerdywTFQRAAT6U6cxwSbiiuO32u7s1yY8-hZBsLqFWW-BdEj1qOBDJwlH2leQ2&t=ffffffffd98c31ca HTTP/1.1
Host: www.marketing.open-transfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 05:27:05 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: text/javascript
Content-Encoding: gzip
Expires: Sat, 23 Sep 2023 05:25:11 GMT
Last-Modified: Fri, 23 Sep 2022 05:25:11 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 2075
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
www.marketing.open-transfer.com/tracking/WebResource.axd?d=2TzLUpAgQmivgzfkWvTE4O1-Zhx7l_cmBfuwrmd3GaryXqYs7Y3-5ZQIuTwSHc1rWRTB8DKbGJkM1BNiEmr77U44SbFSYRZeg8pnNVhw4441&t=637100626445053551
5.252.171.20200 OK 23 kB URL HTTP/1.1 www.marketing.open-transfer.com/tracking/WebResource.axd?d=2TzLUpAgQmivgzfkWvTE4O1-Zhx7l_cmBfuwrmd3GaryXqYs7Y3-5ZQIuTwSHc1rWRTB8DKbGJkM1BNiEmr77U44SbFSYRZeg8pnNVhw4441&t=637100626445053551
IP 5.252.171.20:0
ASN #209945 Viasat Cloud SRL
File type ASCII text, with CRLF line terminators
Hash 90ea7274f19755002360945d54c2a0d7
647b5d8bf7d119a2c97895363a07a0c6eb8cd284
40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db
GET /tracking/WebResource.axd?d=2TzLUpAgQmivgzfkWvTE4O1-Zhx7l_cmBfuwrmd3GaryXqYs7Y3-5ZQIuTwSHc1rWRTB8DKbGJkM1BNiEmr77U44SbFSYRZeg8pnNVhw4441&t=637100626445053551 HTTP/1.1
Host: www.marketing.open-transfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 05:27:05 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: application/x-javascript
Expires: Sat, 23 Sep 2023 04:48:08 GMT
Last-Modified: Sat, 23 Nov 2019 04:37:24 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 23063
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
www.marketing.open-transfer.com/Telerik.Web.UI.WebResource.axd?type=rca&isc=true&guid=1938268a-9bd3-4ba9-a3d3-129909b18386
5.252.171.20200 OK 3.4 kB URL HTTP/1.1 www.marketing.open-transfer.com/Telerik.Web.UI.WebResource.axd?type=rca&isc=true&guid=1938268a-9bd3-4ba9-a3d3-129909b18386
IP 5.252.171.20:0
ASN #209945 Viasat Cloud SRL
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 182x50, components 3\012- data
Hash 574ea9d43a64b57b9ba718510033b388
5d5800973206a6555dc9ebf8fbb34e38cc3a89a6
d37a5881a2c5a1eb29463e1034f43d7b03ee106eabf054e7498af1a57c9c51bc
GET /Telerik.Web.UI.WebResource.axd?type=rca&isc=true&guid=1938268a-9bd3-4ba9-a3d3-129909b18386 HTTP/1.1
Host: www.marketing.open-transfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 05:27:05 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Content-Type: image/jpeg
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 3358
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 86624f45fb3b7126dbe002f69c94dd86
30bcf274db5037122f989fb25dbf1e72c9ec417b
2cc9600578cf057dc499835773fb495caa60ac154c4945f0fc1f2b31d43f5502
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5177
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:27:06 GMT
Last-Modified: Fri, 23 Sep 2022 04:00:49 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
www.marketing.open-transfer.com/tracking/ScriptResource.axd?d=bcbpDEh5zcugjb2K_Wr0Hb2DzQpfOJhmYIYK4yWjaMx29jKdpfsVz8vR-xJg2yt_xWyX1Bi-D6YymRXdgu-WVfoagA2_dcVbMKEuwARKWklbUqrAdOLy_CRJd6KIGuUD1Nft-eRM3C-TNejhigkiY0D0OaEdmjAB8Ro_qXtWwXXDgdhUzlb_l1UH2CPXTeNR0&t=ffffffff9a9577e8
5.252.171.20200 OK 15 kB URL HTTP/1.1 www.marketing.open-transfer.com/tracking/ScriptResource.axd?d=bcbpDEh5zcugjb2K_Wr0Hb2DzQpfOJhmYIYK4yWjaMx29jKdpfsVz8vR-xJg2yt_xWyX1Bi-D6YymRXdgu-WVfoagA2_dcVbMKEuwARKWklbUqrAdOLy_CRJd6KIGuUD1Nft-eRM3C-TNejhigkiY0D0OaEdmjAB8Ro_qXtWwXXDgdhUzlb_l1UH2CPXTeNR0&t=ffffffff9a9577e8
IP 5.252.171.20:0
ASN #209945 Viasat Cloud SRL
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 3394bf8b50ec47396102ab66c47ba4d4
10d4b39504dfbe7ea8e5b7d2312103338ecb707e
a6bab566840e2eb63e7719dbe403950c1bac2e024e3a55661f2d802509e99758
GET /tracking/ScriptResource.axd?d=bcbpDEh5zcugjb2K_Wr0Hb2DzQpfOJhmYIYK4yWjaMx29jKdpfsVz8vR-xJg2yt_xWyX1Bi-D6YymRXdgu-WVfoagA2_dcVbMKEuwARKWklbUqrAdOLy_CRJd6KIGuUD1Nft-eRM3C-TNejhigkiY0D0OaEdmjAB8Ro_qXtWwXXDgdhUzlb_l1UH2CPXTeNR0&t=ffffffff9a9577e8 HTTP/1.1
Host: www.marketing.open-transfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 05:27:05 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Sat, 23 Sep 2023 05:23:33 GMT
Last-Modified: Fri, 23 Sep 2022 05:23:33 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 15431
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
www.marketing.open-transfer.com/tracking/ScriptResource.axd?d=MHoWqAy1lVd40BVLbNvoduIqO8hD114PLC-G5RzBVHZAqRs0WCwYD797YSRBX3Lpw5W7pNu6KPyaCthPbUlwWswlZHJzeQ9vpVhPrI2_u6OD7LG25cFgtikY3HFNqNIgneQs5ry1-CNj0Q9GeNDvYA2&t=ffffffffd98c31ca
5.252.171.20200 OK 15 kB URL HTTP/1.1 www.marketing.open-transfer.com/tracking/ScriptResource.axd?d=MHoWqAy1lVd40BVLbNvoduIqO8hD114PLC-G5RzBVHZAqRs0WCwYD797YSRBX3Lpw5W7pNu6KPyaCthPbUlwWswlZHJzeQ9vpVhPrI2_u6OD7LG25cFgtikY3HFNqNIgneQs5ry1-CNj0Q9GeNDvYA2&t=ffffffffd98c31ca
IP 5.252.171.20:0
ASN #209945 Viasat Cloud SRL
File type Unicode text, UTF-8 (with BOM) text, with very long lines (457)
Hash 4d1a75edd8ebd4168de9438a33fa0cc6
5a1bf2205a644533bcc84a19742ac9ce586b4cc4
bc8e7ef308868bd252691f01385519fbbb000d9013d6717267a6aeb719212365
GET /tracking/ScriptResource.axd?d=MHoWqAy1lVd40BVLbNvoduIqO8hD114PLC-G5RzBVHZAqRs0WCwYD797YSRBX3Lpw5W7pNu6KPyaCthPbUlwWswlZHJzeQ9vpVhPrI2_u6OD7LG25cFgtikY3HFNqNIgneQs5ry1-CNj0Q9GeNDvYA2&t=ffffffffd98c31ca HTTP/1.1
Host: www.marketing.open-transfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 05:27:05 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: text/javascript
Content-Encoding: gzip
Expires: Sat, 23 Sep 2023 05:26:37 GMT
Last-Modified: Fri, 23 Sep 2022 05:26:37 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 15068
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
www.marketing.open-transfer.com/tracking/ScriptResource.axd?d=X4kzai6Wbqwb2FM7NlNSDlWZ8paY0bibZnDX1bxotA5wqfMhJgDn20RHSY3Xe2GyoIIjaSfvTyIUjBBBkuwvEbkut3zSPoC5fomf_6xSHWLqMoVqyp7q5jotfmBZw-2H34_kYFdw6Izr2K73KdOX-nWAA-IGOc9dEJsK-byj5IbIPrYNXlwpzvDv15bBMkPw0&t=ffffffff9a9577e8
5.252.171.20200 OK 48 kB URL HTTP/1.1 www.marketing.open-transfer.com/tracking/ScriptResource.axd?d=X4kzai6Wbqwb2FM7NlNSDlWZ8paY0bibZnDX1bxotA5wqfMhJgDn20RHSY3Xe2GyoIIjaSfvTyIUjBBBkuwvEbkut3zSPoC5fomf_6xSHWLqMoVqyp7q5jotfmBZw-2H34_kYFdw6Izr2K73KdOX-nWAA-IGOc9dEJsK-byj5IbIPrYNXlwpzvDv15bBMkPw0&t=ffffffff9a9577e8
IP 5.252.171.20:0
ASN #209945 Viasat Cloud SRL
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash ff90ebe1e74ebb27695179a99977e710
7bbc463571f13ae75ae26a50d0aae123047b1f1b
e2bfd55f9406c833883ba0a4028884b0d41f4d5678a3357843660e6cc90c93a9
GET /tracking/ScriptResource.axd?d=X4kzai6Wbqwb2FM7NlNSDlWZ8paY0bibZnDX1bxotA5wqfMhJgDn20RHSY3Xe2GyoIIjaSfvTyIUjBBBkuwvEbkut3zSPoC5fomf_6xSHWLqMoVqyp7q5jotfmBZw-2H34_kYFdw6Izr2K73KdOX-nWAA-IGOc9dEJsK-byj5IbIPrYNXlwpzvDv15bBMkPw0&t=ffffffff9a9577e8 HTTP/1.1
Host: www.marketing.open-transfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 05:27:05 GMT
Server: Microsoft-IIS/10.0
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Sat, 23 Sep 2023 05:26:35 GMT
Last-Modified: Fri, 23 Sep 2022 05:26:35 GMT
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Content-Length: 47753
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
push.services.mozilla.com/
34.217.237.91101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.217.237.91:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jUF9HB2gSAWLxdp4x6ZUog==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Zuw28pKw/PSrIosDeFvSahCxEYk=
www.marketing.open-transfer.com/favicon.ico
5.252.171.20404 Not Found 209 B URL HTTP/1.1 www.marketing.open-transfer.com/favicon.ico
IP 5.252.171.20:0
ASN #209945 Viasat Cloud SRL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 18ffb59b61525f781cf9251045be575d
bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
GET /favicon.ico HTTP/1.1
Host: www.marketing.open-transfer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.marketing.open-transfer.com/unsub_verification.aspx?p=bWFya2V0aW5nLm9wZW4tdHJhbnNmZXIuY29tLGxpc2Eucm9tZXJvQG5zZWEtbnYub3JnLDQxNjk1Ni0xODg1NjQtMzc0NDItNDY0MzQtMTE3MDktMTE3MTAsaHR0cHM6Ly9hdGxpbGFjc3RyZWV0LmNvbS8wLzAvMC91ZDEzZmYxZmRmMDgwOTZkNjhlMjhhYmYxYmY4MjllN2YmdHJuaWQ9YjdjY2ExODctN2ZlNC00NzQzLTgzZjEtYjk1NWZhYzIxNmZl
HTTP/1.1 404 Not Found
Date: Fri, 23 Sep 2022 05:27:07 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips
Content-Length: 209
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12864
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 05:27:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12864
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 05:27:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12864
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 05:27:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12864
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 05:27:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948809a9-98f3-49af-9568-833cc0cfb149.jpeg
34.120.237.76200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948809a9-98f3-49af-9568-833cc0cfb149.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2644bb64610b60b23b7dff21736f7b4d
e95d1909750d36a9e426c170778985310cbfc4e4
e668fe1815310914cee8c5853fbcb3d0e48f6f0f8c2d07f7463e627f97153212
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948809a9-98f3-49af-9568-833cc0cfb149.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5533
x-amzn-requestid: af64386b-45ae-47bb-a6fd-f80e306495df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCkMGVEIAMFfhg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e1a-7e417f28422324ed2ddc85da;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fyCuR7eISu5Of0AcZBH5FOtHKRe-Nepnt52kqZtQm0tj1L7lAtGc8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 03:45:46 GMT
age: 6082
etag: "e95d1909750d36a9e426c170778985310cbfc4e4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 61059307f07edc4e2ba9d07a258bca43
370d166426ad83fc04ccb6e300238d8cb6ab644a
55ec802097ab49f275686e99844ff4a3b554c8998213bb9c3f0380709297c55b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5936
x-amzn-requestid: 39e79389-c158-4427-aae0-b1d0dc1d0377
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VowElZoAMF2Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd1-2da28eb66f876af76158b090;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -DSp0__jaBzizsfagTtIpwhkPqkvjS1L6T17J0OS5W0QhZww03ywpw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:29 GMT
age: 26139
etag: "370d166426ad83fc04ccb6e300238d8cb6ab644a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0908c18b-cd0b-41cc-beb5-0347df28884c.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0908c18b-cd0b-41cc-beb5-0347df28884c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9e125802119a2737820b343c4e9ecfb6
30ccc2dd2597b5b720d66c960ee8bd63c7115630
90cce372b2b8c89569fffc55de468bfc7cd4b7454ae7c55c48b7a846506b576e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0908c18b-cd0b-41cc-beb5-0347df28884c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11059
x-amzn-requestid: 65fe1c05-a158-4ac2-8368-f26da119ef68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcDTgGV4oAMF0iw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217f49-74fc5c511bee36fd11d6d2eb;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:14:17 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ArtxwEnLiPvfdnNGum0ZbXPBv8Xd6lR2-vWnBj7MnOIq4q3r6rswWQ==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:51 GMT
age: 26117
etag: "30ccc2dd2597b5b720d66c960ee8bd63c7115630"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8822718-7784-42f7-9be3-17d81593a755.jpeg
34.120.237.76200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8822718-7784-42f7-9be3-17d81593a755.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b577444b5b0cf15747fe28a9d7f22d53
e6097275af3204124c48aa0d876eba0d18b26e7e
0f57e130b23b87fa4e1f9c2a2beff54f1ca73d87a244442558209e378befef11
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8822718-7784-42f7-9be3-17d81593a755.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4999
x-amzn-requestid: 6f7b073e-f199-4bfa-8f9c-6688dbfba15a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn7p7GyRIAMF1EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263fd8-566d8b3c1c25e3fa36259812;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:44:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: n4w6--Eta_zedQ8EOarLoCGZavQpadMCZnXlhGmQf4vgHZxyBKtRgw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:51 GMT
age: 26117
etag: "e6097275af3204124c48aa0d876eba0d18b26e7e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02a682b4703bb9d6381c762726c05531
1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54
fb672de67420a239fe5d7e2588f640150ed29883fe2a46ded160385e3265004c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8029
x-amzn-requestid: 2fc5c63d-5cef-42f4-a6d2-b55f51c57af6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y0tHjGoAMFcFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4ea-73f2f78a2d1ca8fc666d2571;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 7DX67a-HmEh76IorINvRU61AKtSiimdPnHFnYeR2OJezZJ1_mJq0MA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 21:48:22 GMT
age: 27526
etag: "1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3056431736af42cc145a77dbc77c45a7
977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e
d299e38c678f4c4548cd2e7cf7ff1b07910b316bfc8b13c492b4fbee0a66b079
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9892
x-amzn-requestid: f1d435d6-ed01-46b6-8f36-615f07f8cac0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VpWGamoAMFppA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd5-2c3726b022bd389a156532c4;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ycp3xxTZqMDmPjKujrcqGRnuF0lKBH_avDsVSVASv_mU4tTkEfqoYw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 04:26:02 GMT
age: 3666
etag: "977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2